IC card that can have user restricted, authorized person determination method, authorized person determination program, descrambler, authorized person registration method, authorized person registration program, server device administering usage admitted count of IC card, count administration method, and physical description reader

ABSTRACT

A pay television IC card includes a storage unit prestoring fingerprint information that allows identification of a registrant, a fingerprint information input unit accepting input of physical description data of a user, a comparison determination unit comparing fingerprint information accepted by the fingerprint information input unit with fingerprint information stored in the storage unit to determine whether the user is the registrant, and a descramble key generation unit providing a descramble key based on the determination result by the comparison determination unit. A descramble key is output by determining whether the user and the registrant are the same person based on fingerprint information, and determination of the sameness between the user and the registrant is established.

BACKGROUND OF THE INVENTION

[0001] 1. Field of the Invention

[0002] The present invention relates to an IC card, an authorized persondetermination method, an authorized person determination program, acomputer readable recording medium recorded with an authorized persondetermination program, and a descrambler, that can have the userrestricted. The present invention also relates to an authorized personregistration method, an authorized person registration program, and acomputer-readable recording medium recorded with an authorized personregistration program that allows an authorized person to be registered.Furthermore, the present invention relates to a server device, anadministration method, a computer-readable recording medium recordedwith an administration program, and a physical description reader toadminister the usage admitted count of an IC card.

[0003] 2. Description of the Background Art

[0004] A satellite broadcast system transmitting pay televisioninformation through a satellite and having the pay televisioninformation received at a terrestrial television set is conventionallyknown. FIG. 24 is a schematic diagram of a conventional satellitebroadcast system. Referring to FIG. 24, a broadcast station 305scrambles television video and audio signals, and then sends thescrambled signals to a broadcast satellite 303. Broadcast satellite 303transmits the received television video and audio signals to terrestrialreception systems 501A, 501B and 501C. Terrestrial reception systems501A, 501B and 501C receive the scrambled television video and audiosignals through broadcast satellite 303 through a receiver. The scrambleis canceled to allow output of video, audio, and the like from thetelevision set. The television video and audio signal are transmitted ina scrambled form in order to restrict the viewer of the pay televisionto only certain restricted contractants.

[0005] In a conventional satellite broadcast system, two operationsmodes are employed to restrict the person who can cancel the scramble toonly the contractor. Regarding the first operation mode, a descrambleris incorporated in a receiver, which is acquired by the contractor.Regarding the second operation mode, a descrambler is provided with anIC card. The IC card thereof is issued for each contractor of the paytelevision.

[0006] Since the descrambler is provided for each receiver in the firstoperation mode, the contract for a subscriber of a pay television isconcluded for each receiver. In contrast, an IC card will be issued foreach subscriber of the pay television since an ID code is set for eachIC card in the second operation mode. When the subscriber wishes to viewthe pay television, he/she inserts the issued IC card into the receiverto allow cancel of the scrambled television video and audio signals.Since the IC card is portable, the second operation mode is advantageousin that pay television can be viewed even when not at home by justinserting an IC card as long as there is a receiver at the destination.With respect to the second operation mode in which the IC card is soldto an indefinite number of persons, Japanese Patent Laying-Open No.9-139930 discloses the approach to solve the complexity in administeringthe period of contract.

[0007]FIG. 25 is a diagram to describe the concept of a conventionalsatellite broadcast system. Referring to FIG. 25, pay televisioninformation including video and audio signals, a scramble key, attributeinformation of the program, a work key, and contract information is sentfrom the transmitter side to the receiver side. Upon receiving the paytelevision information at the receiver side, an ID number collationcircuit 401 fetches the individual information matching the ID numberstored in a read-only memory (ROM), and transmits the individualinformation to an encryption decoder 405. It is to be noted that a workkey is included in the individual information. Encryption decoder 405provides to an encryption decoder 407 a work key (Kw) obtained bydecoding the received individual information using a master key (Km)prestored in the ROM. Encryption decoder 407 uses the work key (Kw) todecrypt the program information included in the pay televisioninformation to output a scramble key (Ks) and date data. The scramblekey (Ks) is provided to a switch 405. Date data is provided to adetermination circuit 409. An expiration date obtained from the validterm prestored in the ROM is recorded in determination circuit 409.Determination circuit 409 compares the expiration date prestored in theROM with the date data received by encryption decoder 407. In the casewhere the expiration date has not yet come to an end, switch 505 isturned ON, whereby the scramble key (Ks) output from encryption decoder407 can be input to a PN signal generator 402. A PN signal is a pseudorandom signal.

[0008] PN signal generator 402 uses the received scramble key (Ks) tooutput a PN signal to a video audio descrambler 403. Video audiodescrambler 403 cancels the scrambling of the video and audio signalsincluded in the pay television information based on the received PNsignal. As a result of descrambling the video and audio signals, thetelevision video and audio can be output through a television set at thereceiver side. The technique disclosed in Japanese Patent Laying-OpenNo. 9-139930 allows pay television to be viewed within a limited periodof time through usage of an IC card.

[0009] Referring to FIG. 24 again, reception system 501A corresponds tothe case where an IC card of a valid expiration date is inserted intothe receiver. The scramble of the video and audio signals is canceled toallow output of video and audio signals at the television set. Receptionsystem 501B corresponds to the case where an expired IC card is insertedinto the receiver. The scrambling of the video and audio signals is notcanceled, so that no video or audio is output from the television set.Reception system 501C corresponds to the case where an IC card is notinserted into the receiver. Likewise the case of reception system 501B,the scramble of the video and audio signals is not canceled, so that novideo or audio is output from the television set.

[0010] In a pay television system employing a conventional IC card, anIC card is issued for each contractor of the pay television system. Onecard is required for one contractor. This means that a plurality of ICcards, corresponding in number to the members of a family, is requiredin one household. In view of a pay television program restricted topersons over a specified age, different IC cards must be issued, i.e.,an IC card issued to those below a certain age, and an IC card issued tothose over a specified age.

[0011] A conventional IC card can cancel the scramble as long as its IDcode is stored in the ROM, and the ID code is a legitimate one. Howeversuch an ID code has been assigned only for the purpose of the paytelevision service provider to administer the contractor. The matchbetween an IC card and user thereof cannot be established. It is notpossible to confirm whether the user who has inserted the IC card intothe receiver matches the person to whom the IC card has been issued toallow viewing of the pay television. For example, consider the casewhere an IC card is lost and passed to the hands of a stranger. There isa problem that the stranger with the IC card can view pay televisionprograms by means of that IC card. Thus, the ID code recorded in aconventional IC card is envisaged only to determine whether a properissued IC card based on a contract is used or not. No account is paid onthe security when the IC card is lost.

[0012] An IC card has the capability to determine whether to cancel thescramble of an age-restricted program based on the ID code. This meansthat an ID code must be assigned to each user of different age. There isa problem that each person must posses his/her own IC card. Even in thecase where an IC card is possessed by each individual, determinationcannot be made whether the user of the IC card is actually the owner ofthe IC card. There is a problem that a person below a specified age mayuse an IC card owned by another person over a specified age withoutpermission to cancel the scramble of an age-restricted program.

SUMMARY OF THE INVENTION

[0013] In view of the foregoing, an object of the present invention isto provide an IC card that can easily restrict the usage to an intendedend-user, an authorized person determination method, an authorizedperson determination program, and a computer readable recording mediumrecorded with an authorized person determination program.

[0014] Another object of the present invention is to provide an IC cardthat allows usage among a plurality of persons.

[0015] A further object of the present invention is to provide an ICcard that can cancel scrambled age-restricted broadcasting informationfor only the usage to an end-user not subject to an age limit, anauthorized person determination method, an authorized persondetermination program, and a computer-readable recording medium recordedwith an authorized person determination program.

[0016] Still another object of the present invention is to provide an ICcard that allows registration of only an authorized person, anauthorized person registration method, an authorized person registrationprogram, and a computer-readable recording medium recorded with anauthorized registration program.

[0017] A still further object of the present invention is to provide adescrambler that can easily restrict the usage to an intended end-user.

[0018] Yet a further object of the present invention is to provide aserver device that can administer the usage admitted count of an IC cardsecurely and easily, a count administration method, a count administerprogram, and a computer-readable recording medium recorded with such aprogram.

[0019] Yet another object of the present invention is to provide aphysical description reader to administer a user in correspondence withthe usage admitted count of an IC card.

[0020] According to an aspect of the present invention, an IC cardincludes a physical description data storage unit for prestoringphysical description data that allows identification of a predeterminedperson, a physical description data acceptance unit accepting input ofphysical description data of a user, a determination unit comparingphysical description data accepted by the physical description dataacceptance unit with physical description data stored in the physicaldescription data storage unit to determine whether the user is thepredetermined person, and an output unit providing an admission signalbased on the determination result by the determination unit.

[0021] According to the invention of the present aspect, determinationof whether the person using the IC card is the predetermined personwhose physical description data is prestored can be easily made. Sincean admission signal is output based on the determined result of the userbeing the predetermined person, an IC card is provided that can easilyrestrict the usage to an intended end-user.

[0022] According to an aspect of the present invention, an authorizedperson determination method includes the steps of prestoring physicaldescription data that allows identification of a predetermined person,accepting input of physical description data of a user, comparing thephysical description data accepted at the physical description dataacceptance step with prestored physical description data to determinewhether the user is the predetermined person, and providing an admissionsignal based on the determination result of the determination step.

[0023] According to the invention of the present aspect, determinationcan easily be made whether the user is a predetermined person whosephysical description data is prestored. Since an admission signal isoutput based on the determined result of the user being thepredetermined person, an authorized person determination method that caneasily restrict the user to an intended end-user can be provided.

[0024] According to a further aspect of the present invention, anauthorized person determination program causes a computer to execute thesteps of prestoring physical description data that allows identificationof a predetermined person, accepting input of physical description dataof a user, comparing physical description data accepted at the physicaldescription data acceptance step with prestored physical descriptiondata to determine whether the user is the predetermined person, andproviding an admission signal based on the determination result of thedetermination step.

[0025] According to the invention of the present aspect, determinationcan easily be made whether the end-user is the predetermined personwhose physical description data is prestored. Since an admission signalis output based on the determined result of the user being thepredetermined person, an authorized person determination program thatcan easily restrict the usage to an intended end-user and a computerreadable recording medium recorded with such an authorized persondetermination program can be provided.

[0026] According to still another aspect of the present invention, an ICcard includes a storage unit storing physical description data thatallows identification of a predetermined person, an acceptance unitaccepting input of physical description data of a person, adetermination unit comparing input physical description data with storedphysical description data of the predetermined person to determinewhether the person corresponding to the input physical description datais the predetermined person, and a control unit providing control so asto, when determination is made that the person corresponding to theinput physical description data is the predetermined person by thedetermination unit, allow input of physical description data of anotherperson differing from the predetermined person at the acceptance unitand store the input physical description data of the another person inthe storage unit.

[0027] According to the invention of the present aspect, input ofphysical description data of another person is allowed on the conditionthat physical description data of a predetermined person is input.Therefore, an IC card that allows registration of only an authorizedperson can be provided.

[0028] According to a still further aspect of the present invention, anauthorized person registration method includes the steps of storingphysical description data that allows identification of a predeterminedperson, accepting input of physical description data of a person,comparing input physical description data with the stored physicaldescription data of a predetermined person to determine whether theperson corresponding to the input physical description data is apredetermined person, allowing input of physical description data ofanother person differing from the predetermined person whendetermination is made that the person corresponding to the inputphysical description data is the predetermined person at thedetermination step, and storing the input physical description data ofthe another person.

[0029] According to the invention of the present aspect, input ofphysical description data of another person is allowed on the conditionthat physical description data of a predetermined person is input.Therefore, an authorized person registration method that allowsregistration of only an authorized person can be provided.

[0030] According to yet a further aspect of the present invention, anauthorized person registration program causes a computer to execute thesteps of storing physical description data that allows identification ofa predetermined person, accepting input of physical description data ofa person, comparing input physical description data with stored physicaldescription data of a predetermined person to determine whether theperson corresponding to the input physical description data is thepredetermined person, allowing input of physical description data ofanother person differing from the predetermined person whendetermination is made that the person corresponding to the inputphysical description data is the predetermined person at thedetermination step, and storing the input physical description data ofthe another person.

[0031] According to the invention of the present aspect, input ofphysical description data of another person is allowed on the conditionthat physical description data of a predetermined person is input.Therefore, an authorized person registration program that allowsregistration of only an authorized person and a computer readablerecording medium recorded with such an authorized person registrationprogram can be provided.

[0032] According to yet another aspect of the present invention, adescrambler includes a physical description data storage unit prestoringphysical description data that allows identification of a predeterminedperson, a reader reading out physical description data of a user, adetermination unit comparing physical description data read by thereader with physical description data stored in the physical descriptiondata storage unit to determine whether the user is a predeterminedperson, and a descramble unit canceling scramble of informationsubjected to scrambling based on the determination result by thedetermination unit.

[0033] According to the invention of the present aspect, the personusing the descrambler can easily be identified since determination ofthe sameness between the predetermined person whose physical descriptiondata is prestored and the user is based on comparison of physicaldescription data. Since a signal is output to cancel scramble ofinformation subjected to scrambling is output based on the determinedresult of the user being the predetermined person, a descrambler thatcan easily restrict the usage to an intended end-user can be provided.

[0034] According to yet a further aspect of the present invention, aserver device includes a usage admitted count storage unit storing aservice number required to identify an IC card and a usage admittedcount of the IC card in correspondence, a reception unit receivingphysical description data to identify a person and a service number, anda control unit storing the received physical description data incorrespondence with the received service number in the usage admittedcount storage unit.

[0035] According to the invention of the present aspect, physicaldescription data required to identify a person and a usage admittedcount of an IC card are set in correspondence using a service number.Therefore, the usage admitted count of an IC card can be easily set incorrespondence with each person. Furthermore, since the physicaldescription data to identify a person and the IC card usage admittedcount are set in correspondence, the correspondence can be maintainedeven in the case where the IC card is lost. Thus, a server device thatcan administer the usage admitted count of an IC card securely andeasily can be provided.

[0036] According to an additional aspect of the present invention, acount administration method is executed by a server device including ausage admitted count storage unit storing the service number required toidentify an IC card and the usage admitted count of an IC card incorrespondence. The count administration method includes the steps ofreceiving physical description data required to identify a person and aservice number, and storing the received physical description data incorrespondence with the received service number in the usage admittedcount storage unit.

[0037] According to the invention of the present aspect, a countadministration method that can administer the usage admitted count of anIC card securely and easily can be provided.

[0038] According to still an additional aspect of the present invention,a count administration program is executed by a server device includinga usage admitted count storage unit storing a service number required toidentify an IC card and an IC card usage admitted count incorrespondence. The count administration program includes the steps ofreceiving physical description data required to identify a person and aservice number, and storing the received physical description data andthe received service number in correspondence in the usage admittedcount storage unit.

[0039] According to the invention of the present aspect, a countadministration program that can administer the usage admitted count ofan IC card securely and easily, and a computer-readable recording mediumrecorded with such a count administration program can be provided.

[0040] According to yet an additional aspect of the present invention, aphysical description data reader includes a service number receptionunit receiving a service number required to identify an IC card from anIC card, a physical description data reader unit reading out physicaldescription data of a user, and a transmission unit transmitting thephysical description data read out and the received service number tothe server device storing the usage admitted count of an IC card.

[0041] According to the invention of the present aspect, a servicenumber required to identify an IC card and the physical description dataof a user are transmitted to the server device storing the IC card usageadmitted count. Thus, a physical description data reader to administerthe user and the IC card usage admitted count in correspondence can beprovided.

[0042] The foregoing and other objects, features, aspects and advantagesof the present invention will become more apparent from the followingdetailed description of the present invention when taken in conjunctionwith the accompanying drawings.

BRIEF DESCRIPTION OF THE DRAWINGS

[0043]FIG. 1 shows a schematic structure of a pay television systemaccording to a first embodiment of the present invention.

[0044]FIG. 2 is a block diagram of a schematic structure of a descramblemodule according to the first embodiment.

[0045]FIG. 3 is a block diagram of a schematic structure of an IC cardfor pay television of the first embodiment.

[0046]FIG. 4 shows an example of a registrant database stored in thestorage unit of the pay television IC card of the first embodiment.

[0047]FIG. 5 shows a detailed structure of an information temporarystorage unit and a comparison determination unit of the pay televisionIC card of the first embodiment.

[0048]FIG. 6 is a flow chart of the process executed by the paytelevision IC card of the first embodiment.

[0049]FIG. 7 is a flow chart of the process executed by the descramblemodule of the first embodiment.

[0050]FIG. 8 is a diagram to describe the concept of the pay televisionsystem of the first embodiment.

[0051]FIG. 9 is a block diagram of a schematic structure of adescrambler according to a second embodiment.

[0052]FIG. 10 is a flow chart of the process of a descramble processexecuted by the descrambler of the second embodiment.

[0053]FIG. 11 shows a schematic structure of a pay television systemaccording to a third embodiment.

[0054]FIG. 12 is a block diagram of a schematic structure of a masterregistration device of the third embodiment.

[0055]FIG. 13 is a block diagram of a schematic structure of thedescramble module of the third embodiment.

[0056]FIG. 14 is a block diagram of a detailed structure of a dataoutput unit 230A of a descramble module 200A of the third embodiment.

[0057]FIG. 15 is a block diagram of a schematic structure of a paytelevision IC card of the third embodiment.

[0058]FIG. 16 is a diagram to describe information stored in the storageunit of the pay television IC card of the third embodiment.

[0059]FIG. 17 is a block diagram showing a schematic structure of aserver device of the third embodiment.

[0060]FIG. 18 shows an example of user data stored in the user dataadministration unit of the server device of the third embodiment.

[0061]FIG. 19 is a block diagram showing a detailed structure of acomparison unit in the server device of the third embodiment.

[0062]FIGS. 20A and 20B are flow charts of the process executed when apay television IC card is to be purchased in the pay television systemof the third embodiment.

[0063]FIGS. 21, 22, 23A, and 23B are flow charts of the process executedwhen a pay television IC card is used in the pay television system ofthe third embodiment.

[0064]FIG. 24 schematically shows a conventional satellite broadcastingsystem.

[0065]FIG. 25 is a diagram to describe the concept of the conventionalsatellite broadcasting system.

DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0066] Embodiments of the present invention will be describedhereinafter with reference to the drawings.

[0067] In the drawings, the same or corresponding elements are indicatedby the same reference characters. Description in multiplicity will notbe provided.

[0068] First Embodiment

[0069]FIG. 1 shows a schematic structure of a pay television systemaccording to a first embodiment of the present invention. A paytelevision system 1 is mainly divided into the transmission side and thereception side. The transmission side is configured with a broadcaststation 900. The reception side is configured with a descramble module200, an IC card 100 for pay television, and a television set 300.

[0070] At the transmission side, broadcast station 900 transmits anencrypted program attribute signal 203, and a video audio scramblesignal 201. Either radio or cable can be employed for the transmissionmedium. In the case where the television program has an age limitprescribed, encrypted program attribute signal 203 includes programtarget age information indicating the specified age limit. Furthermore,information of a key to be used to cancel the scramble of a video audioscramble signal may be included.

[0071] Video audio scramble signal 201 is a signal of the video andaudio subjected to scrambling for output to a television set 300 at thereception side. The video and audio cannot be output at television set300 unless the scramble is canceled at the reception side.

[0072] Descramble module 200 at the reception side receives scrambledprogram attribute signal 203 and video audio scramble signal 201transmitted from broadcast station 900. Descramble module 200 transmitsthe required information from the received program attribute signal 203to pay television IC card 100.

[0073] Based on the information received by descramble module 200, paytelevision IC card 100 generates and transmits to descramble module 200a descramble key to cancel the scramble of video audio scramble signal201 for descramble module 200.

[0074] Pay television IC card 100 is readily detachable with respect todescramble module 200. Pay television IC card 100 has power suppliedfrom descramble module 200 by being inserted into descramble module 200.Connection between pay television IC card 100 and descramble module 200can be effected through a non-contact or contact type connection method.

[0075] Video audio signal 202 having the scramble canceled at descramblemodule 200 is output to television set 300. Upon receiving the videoaudio signal, television set 300 reproduces the video and audio. Thus, aviewer can enjoy the video and audio based on the video audio scramblesignal 201 transmitted from broadcast station 900.

[0076] In order to watch a pay television program in pay televisionsystem 1 of the present embodiment, IC card 100 and descramble module200 must be installed at the reception side. In the present embodiment,a pay television IC card 100 is acquired as set forth below. The personwho wishes to watch a pay television program submits an application(referred to as “subscriber” hereinafter) in writing to the serviceprovider of the pay television, or through a web site of the paytelevision service provider by means of the Internet. In the applicationfor pay television broadcasting, the subscriber specifies his/heraddress, name, date of birth, a secret identification code determined bythe subscriber, the method of payment, and the like. In response to suchan application in writing or through the web site of the Internet, thepay television service provider writes in the date of birth informationand secret identification code in correspondence with the service numberof the subscriber using a contact type or non-contact type reader writerinto a storage unit 120 (refer to FIG. 3) of pay television IC card 100according to the contents of the application, and then delivers or handsover that pay television IC card to the subscriber.

[0077] Following acquirement of such a pay television IC card by thesubscriber, the process set forth afterwards can be executed through paytelevision IC card 100 by inserting IC card 100 into a preinstalleddescramble module 200.

[0078]FIG. 2 is a block diagram showing a schematic structure ofdescramble module 200 of the first embodiment. Referring to FIG. 2,descramble module 200 includes a control unit 210 controlling theentirety of descramble module 200, a temporary storage unit 215 used asa work area when a program or the like is executed at control unit 210,a broadcast information input unit 240 receiving video audio scramblesignal 201 and encrypted program attribute signal 203 transmitted from abroadcast station, a program attribute signal decoder 270 to decodeencrypted program attribute signal 203, a descramble unit 220 to cancelscramble of video audio scramble signal 201, a descramble key input unit260 receiving a descramble key from pay television IC card 100, a videoaudio signal output unit 280 providing video audio scramble signal 202output from descramble unit 220 to television set 300, an interface(I/F) unit 281 for the receiver to transfer information with respect totelevision set 300, a fingerprint reader 250 to read out a fingerprintof a user, an interface unit (referred to as “I/F unit” hereinafter) 291to transfer required information with respect to pay television IC card100, a set up completion signal input unit 290 to receive a set upcompletion signal, and a data output unit 230 to provide fingerprintinformation, program target age information, and time information to paytelevision IC card 100.

[0079] Broadcast information input unit 240 receives encrypted programattribute signal 203 and video audio scramble signal 201 output frombroadcast station 900. Broadcast information input unit 240 provides theencrypted program attribute signal 203 to program attribute signaldecoder 270 and video audio scramble signal 201 to descramble unit 220.

[0080] Program attribute signal decoder unit 270 decodes encryptedprogram attribute signal 203 received from broadcast information inputunit 240 and provides the program attribute signal to control unit 210.

[0081] Video audio scramble signal 201 is a signal having the video andaudio scrambled. The video audio scramble signal is transmitted on aprogram-by-program basis. Information related to this program is theprogram attribute, included in the program attribute signal. When theaudience of that program is restricted in age, program target ageinformation indicating the age limit is included in the programattribute signal. The program target age information in the programattribute signal is output to pay television IC card 100 by programtarget age information output unit 232 of data output unit 230 that willbe described afterwards.

[0082] Descramble unit 220 cancels the scramble of video audio scramblesignal 201 received by broadcast information input unit 240. Thedescramble key required in canceling the scramble is received fromdescramble key input unit 260. Therefore, descramble unit 220 cannotcancel the scramble of video audio scramble signal 201 unless adescramble key is received from descramble key input 260. In otherwords, the scramble of video audio scramble signal 201 is canceled toallow video audio signal 202 to be provided to video audio signal outputunit 280 only when a descramble key is received by descramble key inputunit 260.

[0083] Fingerprint reader 250 includes a charge coupled device (CCD) topick up an image of a fingerprint of the user of descramble module 200to convert the image into electrical image data, which is output tocontrol unit 210. Data of the picked up image of a fingerprint outputfrom fingerprint reader 250 is referred to as fingerprint informationhereinafter. Fingerprint information is temporarily stored in atemporary storage unit 215 to be read out in response to input of a setup completion signal by set up completion signal input unit 290. Thefingerprint information read out is output to pay television IC card 100by fingerprint information output unit 231.

[0084] Descramble key input unit 260 receives a descramble key from paytelevision IC card 100, and provides the received descramble key todescramble unit 220. Descramble key input unit 260 provides thedescramble key to descramble unit 220 during the reception of adescramble key from pay television IC card 100.

[0085] An I/F unit 291 is connected to an I/F unit 191 of pay televisionIC card 100 to allow input/output of predetermined information to/frompay television IC card 100.

[0086] Set up completion signal input unit 290 receives and provides tocontrol unit 210 a set up completion signal output from a set upcompletion signal output unit 190 of pay television IC card 100. The setup completion signal indicates that pay television IC card 100 isconnected to descramble module 200 and is operable. Control unit 210 candetermine that pay television IC card 100 is inserted in descramblemodule 200 for the duration of receiving a set up completion signal byset up completion signal input unit 290.

[0087] A timer 235 takes count of the current date and time. The outputof timer 235 is provided to a time information output unit 236 as thedate and time information. The date and time information is providedfrom time information output unit 236 to pay television IC card 100.

[0088] Data output unit 230 includes fingerprint information output unit231, program target age information output unit 232, and timeinformation output unit 236. Fingerprint information output unit 231provides fingerprint information stored in temporary storage unit 215 topay television IC card 100. Program target age information output unit232 provides program target age information from the program attributesignal decoded by program attribute signal decoder 270 to pay televisionIC card 100. Time information output unit 236 provides the current datecounted by timer 235 to pay television IC card 100.

[0089] Receiver I/F unit 281 receives numerical information inputthrough a numeric input unit provided at television set 300. The inputnumeric information is provided to control unit 210. The numeric inputunit provided at television set 300 may be an input button or remotecontroller provided at television set 300. The input numeric informationincludes a secret identification number and the date of birth that willbe described afterwards. In order to prompt a user to input numericinformation, a screen that prompts input can be provided at televisionset 300 by video audio signal output unit 280.

[0090] A recording medium 299 has a program to be executed at controlunit 210 recorded. Descramble module 200 reads out the program recordedin recording medium 299 to execute a process according to the programread out.

[0091]FIG. 3 is a block diagram of a schematic structure of paytelevision IC card 100 of the first embodiment. Referring to FIG. 3, paytelevision IC card 100 includes a control unit 110 to control theentirety of pay television IC card 100, a storage unit 120 to storeinformation related to a registrant, a data input unit 130 to receiverequired information from descramble module 200, a set up completionsignal output unit 190 to output a set up completion signal whenconnection with a descramble module 200 is established, an informationtemporary storage unit 160, a comparison determination unit 170performing a comparison determination process using information storedin information temporary storage unit 160, a descramble key generationunit 140 to generate a descramble key based on the comparisondetermination result from comparison determination unit 170, adescramble key output unit 180 to provide the generated descramble keyto descramble module 200, and an interface unit 191 connected to I/Funit 291 of descramble module 200 to input/output the requiredinformation (referred to as I/F 191 hereinafter).

[0092] When the power on and reset operation of pay television IC card100 is completed, set up completion signal output unit 190 issues a setup completion signal to set up completion signal input unit 290 ofdescramble module 200. When a user of pay television IC card 100 insertspay television IC card 100 into descramble module 200 after televisionset 300 and descramble module 200 are turned ON, power is supplied fromdescramble module 200 to pay television IC card 100. Pay television ICcard 100 provided with power is turned ON, and a reset operation isinitiated. This reset operation is under control of control unit 110.When the power on and reset operation of pay television IC card 100 iscompleted under control of control unit 110, a set up completion signalis output from set up completion signal output unit 190 to set upcompletion signal input unit 290.

[0093] Data input unit 130 includes a time information input unit 131,fingerprint information input unit 132, and a program target ageinformation input unit 133. When pay television IC card 100 is insertedinto descramble module 200, time information input unit 131 is connectedto time information output unit 236 of descramble module 200 to receivethe current date and time that is counted by timer 235 from timeinformation output unit 236. The received date and time information isoutput to control unit 110.

[0094] When pay television IC card 100 is inserted into disclosuremodule 200, fingerprint information input unit 132 is connected tofingerprint information output unit 231 of descramble module 200.Fingerprint information is received from fingerprint information outputunit 231 and provided to control unit 110.

[0095] When pay television IC card 100 is inserted into descramblemodule 200, program target age information input unit 133 is connectedto program target age information output unit 232 of descramble module200. Program target age information is received from program target ageinformation output unit 232 of descramble module 200 to be provided tocontrol unit 110.

[0096] Storage unit 120 includes a registrant database to register aperson who is admitted as an audience of pay television as a registrant.In the registrant database are stored a service number assigned for eachregistrant, fingerprint information of that registrant, date of birthinformation, and actual age information in correspondence. The servicenumber is determined arbitrarily by control unit 110. Fingerprintinformation received through fingerprint information input unit 132 isstored as fingerprint information in the registrant database. Date ofbirth information stored in the registrant database is received from I/Funit 191. The actual age information stored in the registrant databaseis obtained by the information based on the date of birth and thecurrent date received through time information input unit 131. The flowof a registrant database generation process will be described in detailafterwards.

[0097] A secret identification code unique to pay television IC card 100is stored in the registrant database in storage unit 120. This secretidentification code is recorded into storage unit 120 when a paytelevision IC card 100 is issued from a broadcast service provider suchas broadcast station 900.

[0098] Preferably, a memory that cannot be rewritten once information isstored is used for storage unit 120. This preferably includes a memorythat requires a rewrite admission signal for rewriting, a fuse typememory, or the like.

[0099] Information temporary storage unit 160 is a random access memory,temporarily storing fingerprint information of a user received atfingerprint information input unit 132, fingerprint information of aregistrant stored in storage unit 120, program target age informationreceived at program target age information input unit 133 , and theactual age of the registrant stored in storage unit 120.

[0100] Comparison determination unit 170 compares fingerprintinformation obtained by reading out a fingerprint of a user with thefingerprint information of a registrant stored in storage unit 120 toidentify whether the user and the registrant are the same person. Whenprogram target age information is stored in information temporarystorage unit 160, comparison determination unit 170 compares the programtarget age information with the actual age of the registrant stored instorage unit 120. Comparison determination unit 170 outputs an admissionsignal to descramble key generation unit 140 when determination is madeof the sameness between the user and the registrant, or in the casewhere program target age information is stored in information temporarystorage unit 160, when determination is made that the user is the sameperson as the registrant and the actual age is equal to or higher thanthe value of the program target age information.

[0101] Descramble key generation unit 140 generates and provides todescramble key output unit 180 a descramble key on the condition that anadmission signal is received from comparison determination unit 170. Inthe case where key information to generate a descramble key istransmitted from a transmission station, the transmitted key informationis received to generate a descramble key based on the received keyinformation.

[0102] Descramble key output unit 180 provides the received descramblekey to descramble key input unit 260 of descramble module 200.

[0103] Recording medium 199 is recorded with the program executed bycontrol unit 110. Pay television IC card 100 reads out the programrecorded in recording medium 199 to execute a process according to theprogram read out.

[0104]FIG. 4 shows an example of a registrant database stored in storageunit 120 of pay television IC card 100 of the first embodiment.Referring to FIG. 4, the registrant database is stored with a servicenumber 121, fingerprint information 122, birth of date information 123,actual age information 124, and a secret identification code 125 foreach registrant. Service number 121 is assigned by control unit 110 ofpay television IC card 100 for each registrant. Service number 121differs for each recorded registrant.

[0105] Fingerprint information 122 corresponds to a registrant. Thisfingerprint information is obtained by reading out the fingerprint of aregistrant through fingerprint reader 250 of descramble module 200 inthe registration process that will be described afterwards. Date ofbirth information 123 is the date of birth of a registrant, inputthrough a remote controller or the like of television set 300 by aregistration process that will be described afterwards. Date of birthinformation 123 is received at receiver I/F unit 281 for storage. Actualage information 124 is calculated by control unit 110 for storage. Atcontrol unit 110, the actual age of a registrant is calculated based onthe current date received through time information input unit 131 anddate of birth information 123 in the registrant database. The calculatedactual age is stored in actual age information 124 of the registrantdatabase. Calculation of actual age information by control unit 110 maybe conducted every time power is supplied to pay television IC card 100,or at a predetermined interval, for example, every day.

[0106] Secret identification code 125 is a unique number of 4 digits ofpay television IC card 100. The number of digits of the secretidentification code is not limited to 4. This secret identification code125 is stored in storage unit 120 by a pay television service providerwhen pay television IC card 100 is issued.

[0107] The subscriber that has applied for watching the pay televisionwill become the only person that can use the IC card for pay televisionbroadcasting. This is because only the subscriber is aware of the secretidentification code. The subscriber who is aware of the secretidentification code 125 can store his/her fingerprint information intothe registrant database in storage unit 120 using secret identificationcode 125. Therefore, at least one secret identification code 125 shouldbe present in pay television IC card 100. The subscriber that is firstregistered is called the master registrant. According to secretidentification code 125, fingerprint information of the masterregistrant can be input on the condition that the secret identificationcode is input in the registration process that will be describedafterwards. It is to be noted that the secret identification code can bedeleted from pay television IC card 100 after the fingerprintinformation of the master registrant is input.

[0108] Furthermore, the date of birth information of only the masterregistrant is stored in storage unit 120 by the pay television serviceprovider when the pay television IC card 100 is issued.

[0109]FIG. 4 corresponds to the case where four registrants are recordedin the registrant database. The registrant whose service number is MT001is the master registrant. The data of the master registrant includes asecret identification code in addition to the fingerprint information,date of birth information, and actual age information. The registrantswhose service numbers are AT0011, AT0012 and AT0013 are additionalregistrants. The data corresponding to the additional registrantincludes a service number, fingerprint information, date of birthinformation, and actual age information. The additional registrant datadoes not include a secret identification code.

[0110]FIG. 4 corresponds to the case where the data of three additionalregistrants is stored in addition to the data of the master registrantin the registrant database. However, the registrant database does notnecessarily have to store data of an additional registrant. At least thedata of the master registrant should be stored in the registrantdatabase.

[0111]FIG. 5 shows the detailed structure of information temporarystorage unit 160 and comparison determination unit 170 of pay televisionIC card 100 of the first embodiment. Referring to FIG. 5, informationtemporary storage unit 160 includes a program target age informationstorage unit 161 to temporarily store program target age informationreceived at program target age information input unit 133, an actual ageinformation storage unit 162 to temporarily store actual age informationof a user read out from storage unit 120, fingerprint informationstorage unit 163 to temporarily store fingerprint information receivedat fingerprint information input unit 132, and a registrant fingerprintinformation storage unit 164 temporarily storing fingerprint informationof a registrant stored in storage unit 120.

[0112] When there are a plurality of registrants stored in storage unit120, the fingerprint information of a registrant is sequentially outputfrom storage unit 120 into registrant fingerprint information storageunit 164. Fingerprint information received through fingerprintinformation input unit 132 is stored in fingerprint information storageunit 163. The fingerprint information received through fingerprintinformation input unit 132 is the fingerprint information of thefingerprint of a user read out and output by fingerprint reader 250 ofdescramble module 200.

[0113] Program target age information received through program targetage information input unit 133 is stored in program target ageinformation storage unit 161. The actual age information of a registrantcorresponding to this fingerprint information stored in registrantfingerprint information storage unit 164 is stored in actual ageinformation storage unit 162.

[0114] Comparison determination unit 170 compares the fingerprintinformation stored in fingerprint information storage unit 163 withfingerprint information stored in registrant fingerprint informationstorage unit 164 to determine whether fingerprint information matches oris similar to each other. In other words, determination is made whetherthe user of descramble module 200 is the same person as the registrantwhose data is registered in storage unit 120 of pay television IC card100. In the case where the fingerprint information stored in fingerprintinformation storage unit 163 matches or is similar to the fingerprintinformation stored in registrant fingerprint information storage unit164 based on the comparison by fingerprint comparison determination unit175, an admission signal 176 is output to descramble key generation unit140. When the fingerprint information do not match, a signal 177indicating mismatch is output to control unit 110.

[0115] Age comparison unit 171 compares the program target ageinformation stored in program target age information storage unit 161with the actual age information stored in actual age information storageunit 162 to output a signal 172 indicating the comparison result todescramble key generation unit 140. Signal 172 indicating the comparisonresult includes an admission signal output when the actual age includedin the actual age information is equal to or above the program targetage included in the program target age information, and a disallowsignal that is output otherwise.

[0116] The process carried out at pay television IC card 100 will bedescribed hereinafter with reference to the flow chart of FIG. 6indicating the process executed at pay television IC card 100 in thefirst embodiment. In response to a user inserting pay television IC card100 into the descramble module 200, power is supplied from descramblemodule 200 to pay television IC card 100. Pay television IC card 100 isturned ON to initiate a reset operation. This reset operation is undercontrol of control unit 110. Determination is made whether the power onand reset operation of pay television IC card 100 is completed or not bycontrol unit 110 (step S01). When determination is made of completion, aset up completion signal is continuously output from set up completionsignal output unit 190 to set up completion signal input unit 290 (S02).When determination is made that the operation has not been completed,pay television IC card 100 attains a standby state until the power andreset operation is completed.

[0117] During reception of a set up completion signal, set up completionsignal input unit 290 of descramble module 200 outputs a signalindicating an active state to control unit 210. When a set up completionsignal is not received, a signal indicating an inactive state is output.Therefore, detection can be made of pay television IC card 100 being setduring the reception of this set up completion signal at descramblemodule 200.

[0118] In an inactive state, data output unit 230 of descramble module200 attains an inactive state. When power is not supplied fromdescramble module 200, pay television IC card 100 attains an inactivestate. Also, data input unit 130 attains an inactive state. This meansthat, even if an externally applied signal is input to data input unit130, control unit 110 will not conduct an operation to receive any ofthe input information. Furthermore, data output unit 230 of descramblemodule 200 does not conduct an operation to output any information in aninactive state.

[0119] Pay television IC card 100 attains an active state at the pointof time when a set up completion signal is output from set up completionsignal output unit 190, and remains at an inactive state at the stageprior to output of a set up completion signal. Whatever information isinput to data input unit 130, control unit 110 will not conduct anoperation to receive any input information when pay television IC card100 is an inactive state. Control unit 110 accepts the information inputto data input unit 130 only after a set up completion signal is outputfrom set up completion signal output unit 190.

[0120] Similarly, information from data output unit 230 can be outputonly after a set up completion signal is input to set up completionsignal input unit 290 and a signal indicating an active state isprovided to control unit 210 at descramble module 200. Data output unit230 can output no information during the period of time a signalindicating an inactive state is output from set up completion signalinput unit 290 to control unit 210.

[0121] Thus, pay television IC card 100 and descramble module 200 attainan active state only after a set up completion signal is output from setup completion signal output unit 190 of pay television IC card 100.Accordingly, information can be transferred between pay television ICcard 100 and descramble module 200.

[0122] Then, determination is made whether fingerprint information ispresent in the registrant database in storage unit 120 of pay televisionIC card 100 (step S03). When there is at least one fingerprintinformation, control proceeds to step S10, otherwise, to step (S04).

[0123] At step S04, a secret identification code prestored in theregistrant database of storage unit 120 is read out. Control unit 110outputs a command from I/F unit 191 to descramble module 200 indicatingoutput of a screen prompting input of a secret identification code attelevision set 300.

[0124] Control unit 210 of descramble module 200 receives this commandvia I/F unit 291, whereby a screen indicating a message of, “Pleaseenter application secret identification code”, for example, is providedon the display of television set 300 via video audio signal output unit280. The user is made aware of the need to enter the secretidentification code specified at the time of application by viewing themessage displayed at television set 300. Therefore, a secretidentification code is input through a numeric input unit such as aremote controller provided at television set 300.

[0125] The secret identification code input at television set 300 isreceived at control unit 210 of descramble module 200 via receiver I/Funit 281. The secret identification code received at descramble module200 is transmitted to pay television IC card 100 via I/F 291.

[0126] At pay television IC card 100, I/F unit 191 receives the secretidentification code from descramble module 200 (step S05).

[0127] Then, the secret identification code read out at step S04 iscollated with the secret identification code received at step S05 (stepS06). When the numbers match, control proceeds to step S07, otherwise,to step S05. At step S05 corresponding to a mismatch, a command thatdisplays a screen indicating a message of “Please enter the secretidentification code” on the display of television set 300 again istransmitted to descramble module 200.

[0128] In the case where the secret identification codes match as aresult of collation, the user is recognized to be the subscriber sincethe user has knowledge of the secret identification code. Uponconfirmation of the user being the subscriber, an admission signal isdispatched to descramble module 200 via I/F unit 191 at step S07.

[0129] At descramble module 200, the admission signal is received at I/Funit 291 and transmitted to control unit 210. In response to thereceived admission signal, control unit 210 of descramble module 200transmits a command to display a screen with the message of “Pleaseregister the fingerprint of subscriber” at television receiver 300 fromvideo audio signal output unit 280. In response, the screen is displayedat television set 300. Accordingly, the user can have his/herfingerprint read out by fingerprint reader 250 of descramble module 200.

[0130] Fingerprint reader 250 picks up an image of the fingerprint ofthe user. The image of the fingerprint is converted into electricsignals by the CCD to be provided to control unit 210 as fingerprintinformation. Control unit 210 transmits the received fingerprintinformation to pay television IC card 100 via fingerprint informationoutput unit 231. At pay television IC card 100, the fingerprintinformation is received at fingerprint information input unit 132 (stepS08). The received fingerprint information is stored in the registrantdatabase of storage unit 120 as the fingerprint information of themaster registrant (step S09).

[0131] Following step S09, or when determination is made that there isfingerprint information at step S03, determination is made at paytelevision IC card 100 whether the user has selected an additionalregistration process for “REGISTRATION OF NEW USER”, or a pay televisionview process for “VIEW PAY TELEVISION PROGRAM” based on the signalreceived from descramble module 200 (step S10). In the case where anadditional registration process is selected, control proceeds to stepS11, otherwise, to step S21.

[0132] In this case, control unit 210 of descramble module 200 providesa screen including the two messages of “REGISTRATION OF NEW USER” and“VIEW PAY TELEVISION PROGRAM” to television set 300 from video audiosignal output unit 280. The user enters a numeric value to select eitherprocess through a numeric input unit such as the remote controller.Descramble module 200 outputs a signal indicating which process has beenselected to pay television IC card 100 based on the received numericvalue.

[0133] At step S11, the fingerprint information of the master registrantpreviously registered is read out from the registrant database ofstorage unit 120. In the case where an additional registration processis selected, descramble module 200 provides a screen displaying amessage of, for example, “Please enter fingerprint of master registrant”to television set 300 via video audio signal output unit 280. The userwill have the fingerprint information read out by fingerprint reader 250of descramble module 200 according to the message displayed attelevision set 300. An image of the fingerprint of the user is picked upby fingerprint reader 250 of descramble module 200. The fingerprintinformation is output to control unit 210. Control unit 210 provides thereceived fingerprint information to pay television IC card 100 viafingerprint information output unit 231. At pay television IC card 100,fingerprint information is received at fingerprint information inputunit 132 to be output to control unit 110 (step S12).

[0134] Control unit 110 compares the fingerprint information received atstep S12 with the fingerprint information of the master registrant readout at step S11 (step S13). Determination is made whether the masterregistrant in the registrant database of storage unit 120 is the sameperson as the user of descramble module 200 (step S14). Determination ofthe same person is made when the fingerprint information of the masterregistrant read out at step S11 is identical or similar to thefingerprint information of the user received at step S12. Thefingerprint information is image data obtained by picking up an image ofa fingerprint through an image sensing element such as a CCD. Bysubjecting the image data to pattern comparison, determination can bemade whether the fingerprint information is identical or similar.

[0135] When determination is made of the same person at step S14,control proceeds to step S15, otherwise, to step S10. In order toregister an additional registrant at step S15, an admission signal topermit additional registration is output to descramble module 200 viaI/F unit 191.

[0136] Upon reception of an admission signal at descramble module 200via I/F unit 291, control unit 210 outputs a screen displaying a messageprompting entry of the date of birth and fingerprint of the additionalregistrant from video audio signal output unit 280 to television set300. The message prompting entry of the date of birth and fingerprintinformation includes, for example, “Please enter the date of birth” and“Please enter fingerprint”.

[0137] Thus, the messages of “Please enter date of birth” and “Pleaseenter fingerprint” are displayed at television set 300. As a result ofthe user entering the date of birth of the additional registrant throughthe numeric input unit of television set 300 such as the remotecontroller, the date of birth is received at control unit 210 viareceiver I/F unit 281. Also, by having the fingerprint of the additionalregistrant read out by fingerprint reader 250, the read fingerprintinformation is transmitted to control unit 210. Upon receiving the dateof birth, control unit 210 outputs the date of birth to pay televisionIC card 100 via I/F 291. Also, upon reception of fingerprintinformation, control unit 210 outputs the fingerprint information to paytelevision IC card 100 via fingerprint information output unit 231. Atpay television IC card 100, the date of birth is received via I/F unit191 (step S16). The fingerprint information is received via fingerprintinformation input unit 132 (step S17).

[0138] Thus, the received date of birth and fingerprint information ofthe additional registrant are newly stored into the registrant databaseof storage unit 120 (step S18).

[0139] At descramble module 200, a screen including a message of, forexample, “Is there another registrant?” is output to television set 300via video audio signal output unit 280. In response to this displayedmessage, the user enters numeric data indicating the presence/absence ofanother registrant through a numeric input unit such as the remotecontroller at television set 300. Then, the signal indicating theabsence/presence of an additional registrant is received at control unit210 via receiver I/F unit 281. Control unit 210 outputs the signalindicating the presence/absence of an additional registrant to paytelevision IC card 100 via I/F 291. At pay television IC card 100,determination is made whether there is another registrant based on thesignal received via I/F unit 191 (step S19). When there is an additionalregistrant, control proceeds to step S16, otherwise, to step S10. Theprocess of the above-described steps S16-S18 is repeated for eachanother additional registrant.

[0140] Thus, data registration of a registrant other than the masterregistrant is stored in the registrant data base of storage unit 120.

[0141] In the case where a pay television broadcast view process isselected at step S10, descramble module 200 outputs the current date,program target age information, and fingerprint data of the user. Inresponse, the current date is received at time information input unit131 to be stored in information temporary storage unit 160, and theprogram target age information is received at program target ageinformation input unit 131 to be stored in program target ageinformation storage unit 161 of information temporary storage unit 160at pay television IC card 100 (step S21). Also, fingerprint data of theuser is received at fingerprint information input unit 132 to be storedin fingerprint information storage unit 163 in information temporarystorage unit 160 (step S22).

[0142] The fingerprint information recorded in the registrant databasein storage unit 120 is sequentially read out and stored in registrantfingerprint information storage unit 164 of information temporarystorage unit 160 (step S23).

[0143] Then, the fingerprint information of the user stored infingerprint information storage unit 163 in step S22 is compared withthe fingerprint information of the registrant stored in registrantfingerprint information storage unit 164 read out at step S23 (stepS24). Determination is made whether the user is the same person as theregistrant based on the comparison (step S25). When determination ismade of the same person, control proceeds to step S26, otherwise, tostep S30.

[0144] At step S26, the date of birth of the registrant corresponding tothe fingerprint information stored in registrant fingerprint informationstorage unit 164 read out at step S23 is read out from the registrantdatabase in storage unit 120. Based on the current date received at stepS21 and the date of birth read out at step S26, the actual age which isthe current age of the registrant is calculated and stored in actual ageinformation storage unit 162 of information temporary storage unit 160(step S27). In the case where the actual age information is stored inthe registrant database of storage unit 120, the actual age informationis read out from storage unit 120. In this case, steps S26 and S27 arenot required.

[0145] Determination is made whether the actual age stored in actual ageinformation storage unit 162 is equal to or above the program target agein the program target age information stored in program target ageinformation storage unit 161 (step S28). When the actual age is equal toor above the program target age, control proceeds to step S29,otherwise, to step S31.

[0146] At step S29, a descramble key is generated at descramble keygeneration unit 140. The generated descramble key is output todescramble module 200 from descramble key output unit 180 (step S29).

[0147] When determination is made that the user is not the same personat step S25, determination is made whether a next registrant isregistered in the registrant database in storage unit 120. When there isanother registrant, control proceeds to step S23, otherwise, to stepS31.

[0148] At step S31, an error signal is output from descramble key outputunit 180.

[0149]FIG. 7 is a flow chart of the process executed by descramblemodule 200 of the first embodiment. Referring to FIG. 7, descramblemodule 200 determines whether a set up completion signal has beenreceived at set up completion signal input unit 260 from pay televisionIC card 100 (step S41). When a set up completion signal is received,control proceeds to step S42, otherwise, waiting is conducted. Thus,descramble module 200 attains an active state only when a set upcompletion signal is received, and otherwise attains an inactive state.

[0150] At step S42, determination is made whether a command has beenreceived to output a screen prompting input of a secret identificationcode by pay television IC card 100. When the command has been received,control proceeds to step S43, otherwise, to step S48. At step S43, ascreen including the message prompting input of a secret identificationcode, for example, “Please enter the secret identification code” isoutput to television set 300 from video audio signal output unit 280.

[0151] Upon input of a secret identification code by the user through anumeric value input unit such as a remote controller at television set300, the input secret identification code is received at receiver I/Funit 281 (step S43). At control unit 210, the received secretidentification code is transmitted to pay television IC card 100 via I/Funit 291 (step S44).

[0152] At pay television IC card 100, the determination is made whetherthe received secret identification code matches the secretidentification code stored in the registrant database in storage unit120. An admission signal is dispatched to descramble module 200 onlywhen the secret identification codes match. At descramble module 200,determination is made whether an admission signal is received from paytelevision IC card 100 (step S45). When the admission signal isreceived, control proceeds to step S46, otherwise, to step S43. In thecase where an admission signal is not received, a screen prompting inputof a secret identification code again is output to television set 300.Input of a secret identification code is to be conducted again.

[0153] At step S46, a screen including the message of, for example,“Please enter fingerprint” on the display of television set 300 isoutput via video audio signal output unit 280. In response to themessage displayed at television set 300, the user enters his/herfingerprint through fingerprint reader 250. The fingerprint is read outand output to control unit 210 as fingerprint information in the form ofelectronic data (step S46).

[0154] The read fingerprint information is transmitted from fingerprintinformation output unit 231 to pay television IC card 100 (step S47).Upon reception of fingerprint information, pay television IC card 100has the received fingerprint information stored in the registrantdatabase in storage unit 120 as the fingerprint information of themaster registrant.

[0155] Following step S47, or when a command to output a secretidentification code input screen at step S42 is not received,determination is made whether an additional registration process ofconducting registration of a new user or a pay television view processto view a pay television program has been selected (step S48).Specifically, a screen to select whether to execute an additionalregistration process or a pay television program view process is outputto television set 300 via video audio signal output unit 280. Such ascreen includes, for example, a screen displaying the two messages of,“VIEW PAY TELEVISION PROGRAM” and“REGISTRATION OF NEW USER”. The userselects one of the two processes using a numeric input unit such as aremote controller of television set 300. A signal indicating whichprocess has been selected is received at receiver I/F unit 281. Atcontrol unit 210, determination is made whether an additionalregistration process or a pay television program view process has beenselected based on the received signal. Also, a signal indicating whichprocess has been selected is output to pay television IC card 100 fromI/F unit 291.

[0156] When an additional registration process has been selected,control proceeds to step S49. When the other pay television program viewprocess has been selected, control proceeds to step S56.

[0157] At step S49, a screen prompting entry of the fingerprint of themaster registrant is output to television set 300 via video audio signaloutput unit 280. The fingerprint is read by fingerprint reader 250. Thefingerprint information is output to control unit 210 (step S49).

[0158] At step S50, fingerprint information corresponding to the signalread out at step S49 is transmitted to pay television IC card 100 viafingerprint information output unit 231.

[0159] At pay television IC card 100, the received fingerprintinformation is compared with the fingerprint information of the masterregistrant stored in storage unit 120 to determine whether the user isthe same person as the master registrant. When determination is made ofthe same person at pay television IC card 100, an admission signal isoutput to descramble module 200. At descramble module 200, the admissionsignal is received at I/F unit 291.

[0160] At step S51, determination is made whether an admission signal isreceived or not. When an admission signal is received, control proceedsto step S52, otherwise, to step S48.

[0161] At step S52, a screen prompting entry of the fingerprint of anadditional registrant is output to television set 300 via video audiosignal output unit 280. The fingerprint of the additional registrant isread by fingerprint reader 250. The obtained fingerprint information isoutput to control unit 210.

[0162] Then, a screen including a message to prompt input of the date ofbirth of the additional registrant is output to television set 300 viavideo audio signal output unit 280. The date of birth input through thenumeric input unit such as the remote controller of television set 300is received at receiver I/F unit 281 (step S53).

[0163] The date of birth received at step S53 and the fingerprintinformation read out at step S52 are transmitted to pay television ICcard 100 (step S54). The fingerprint information is transmitted viafingerprint information output unit 231. The date of birth informationis transmitted via I/F unit 291.

[0164] Then, a screen including a message asking whether there is anadditional registrant is output to television set 300 via video audiosignal output unit 280. The user specifies where there is an additionalregistrant through the numeric input unit such as the remote controller.This signal is received at receiver I/F unit 281, and output to paytelevision IC card 100 from I/F unit 292. Determination is made of theabsence/presence of an additional registrant based on the receivedsignal (step S55). When a signal indicating that there is an additionalregistrant is received, control proceeds to step S52, otherwise to stepS48. When there is an additional registrant, the process from stepsS52-S54 is repeated. The fingerprint information and date of birth ofeach additional registrant are transmitted to pay television IC card100.

[0165] When a pay television program view process is selected at stepS48, program target age information is transmitted from program targetage information output unit 232 to pay television IC card 100, and timeinformation including the current date and time counted by timer 235 isoutput to pay television IC card 100 from time information output unit236, based on the program attribute signal decoded by program attributesignal decoder 270 (step S56).

[0166] Then, a screen including a message of, for example “Please enterfingerprint” is output to television set 300 via video audio signaloutput unit 280. The fingerprint of the user is read out by fingerprintreader 250 (step S57). Fingerprint information read out by fingerprintreader 250 of the fingerprint of the user is output to pay television ICcard 100 via fingerprint information output unit 231 (step S58).

[0167] Upon receiving the fingerprint information of the user at paytelevision IC card 100, the fingerprint information of the user iscompared with the fingerprint information stored in the registrantdatabase in storage unit 120 to determine whether the user is the sameperson as the registrant. Also, when program target age information isstored in program target age information storage unit 161, determinationis made whether the actual age of the user is at least the age in theprogram target age information. In the case where program target ageinformation is stored in program target age information storage unit161, a descramble key is output to descramble module 200 whendetermination is made that the user is identical to the registrant, andthe user's actual age is equal to or above the program target age. Inthe case where the program target age information is not stored inprogram target age information storage unit 161, the descramble key isoutput to descramble module 200 when determination is made that the useris the same person as the registrant.

[0168] At descramble module 200, determination is made whether adescramble key has been received at descramble key input unit 260 (stepS59). When a descramble key has been received, control proceeds to stepS60. A process to cancel the scramble of video audio scramble signal 201received at broadcast information input unit 240 is carried out atdescramble unit 220 (step S60).

[0169] When a descramble key has not been received, the process of stepS60 is not carried out, and the process ends.

[0170]FIG. 8 is a diagram to describe the concept of the pay televisionsystem of the present embodiment. Referring to FIG. 8, the video audioscramble signal subjected to a scramble process and transmitted frombroadcast station 305 and the encrypted program attribute signaltransmitted from broadcast station 305 are received at descramble module200 via broadcast satellite 303.

[0171] Consider the first example corresponding to fingerprintauthentication failure. In the first example, determination is made thatthe registrant recorded in pay television IC card 100 is not identicalto the user. The scramble of video audio scramble signal 201 is notcanceled when the fingerprint information of the registrant stored inpay television IC card 100 does not match or is not similar to thefingerprint information obtained by reading out the fingerprint of theuser. Therefore, the video and audio will not be output to televisionset 300.

[0172] The second example corresponds to the case where fingerprintauthentication is successful and the actual age of the user is lowerthan the age threshold value. Although determination is made that theregistrant recorded in pay television IC card 100 is identical to theuser, the program target age obtained from the program target ageinformation included in the program attribute signal is higher than theactual age of the user. The age of the user is below the program targetage that is allowed of audience of the program included in the programattribute signal even though determination is made that the user is thesame person as the registrant. In this case, scramble of video audioscramble signal is not canceled. Neither the video nor audio will beoutput at television set 300.

[0173] The third example corresponds to the case where fingerprintauthentication is successful and the actual age is at least the agethreshold value. Determination is made that the registrant recorded inpay television IC card 100 is identical to the user, and the actual ageof the user is equal to or above the program target age included in theprogram attribute signal. In this case, scramble of the video audioscramble signal is canceled. The video and audio is output fromtelevision set 300.

[0174] The fourth example corresponds to the case where there is no ICcard. No pay television IC card 100 is inserted into descramble module200. In this case, a set up completion signal is not output from paytelevision IC card 100. Therefore, descramble module 200 does not attainan active state. The scramble of the video audio scramble signal is notcanceled. Thus, neither the video nor audio will be output fromtelevision set 300.

[0175] Since determination of the sameness between the user and theregistrant is based on the fingerprint which is the physical descriptionof a person in the pay television system of the present embodiment, theperson who can use the pay television IC card 100 can be restricted toonly the person who is registered. As the physical description data, theiris, voice print, or the like can be employed instead of a fingerprint.Furthermore, determination of the sameness of a person can be made basedon a process on an image of a person's face that is shot.

[0176] Since the data of a plurality of persons can be registered in theregistrant database of storage unit 120 of pay television IC card 100,one pay television IC card 100 can be shared among a plurality ofpersons. Since determination of the sameness between a registrantrecorded in pay television IC card 100 and the user is made based on animage obtained by reading out the fingerprint which is physicaldescription data of a person, determination of the same person can beconducted at high accuracy.

[0177] By virtue of the high accuracy of determination of samenessbetween the user and the registrant, descramble can be reliablyinhibited with respect to the usage of a person of an age that is notpermitted audience of an age-restricted program.

[0178] Since the actual age of the user is calculated based on the dateof birth data and the current date data, it is not necessary to modifythe age information. Maintenance of the stored information can besimplified.

[0179] Furthermore, since another registrant can be registered only onthe condition that the fingerprint of a master registrant is input, onlya person that is authorized by the master registrant can be registeredas a registrant.

[0180] The above embodiment was described based on a pay television ICcard 100 and a descramble module 200. Alternatively, the processexecuted by the pay television IC card 100 shown in FIG. 6 and theprocess executed by the descramble module 200 shown in FIG. 7 may beimplemented as programs executed by a computer. In this case, theprogram to execute the processes shown in FIGS. 6 and 7 is stored inrecording medium 199 or 299, and read out to control unit 210 of paytelevision IC card 100 or control unit 110 of descramble module 200 tobe executed.

[0181] Such recording media 199 and 299 can include a magnetic tape, acassette tape, a magnetic disk (flexible disk, hard disk, etc.), anoptical disk (CD-ROM/MO/MD/DVD, etc.), an IC card (including a memorycard), an optical card, and a semiconductor memory such as a mask ROM,EPROM, flash memory, and the like. Recording media 199 and 299 can alsobe employed as a carrier medium in downloading a program from thenetwork.

[0182] Second Embodiment

[0183] In the previous first embodiment, pay television IC card 100 anddescramble module 200 are provided as individual units. In the secondembodiment of the present invention, pay television IC card 100 anddescramble module 200 are integrally formed as a descrambler 400.

[0184] The descrambler of the second embodiment is supplied by the paytelevision service provider when a subscriber who wishes to receive theservice of a pay television system applies for authorized viewing of paytelevision. The pay television service provider records the date ofbirth information and secret identification code in storage unit 120 incorrespondence with the service number of the subscriber before thedescrambler is delivered to the subscriber.

[0185]FIG. 9 is a block diagram of a schematic structure of thedescrambler of the second embodiment. Referring to FIG. 9, descrambler400 includes a control unit 110 to control the entirety of descrambler400, a broadcast information input unit 240 to receive video audioscramble signal 201 and encrypted program attribute signal 203 from abroadcast station, a program attribute signal decoder 270 to decodeencrypted program attribute signal 203 received by broadcast informationinput unit 240, a fingerprint reader 250 to read out the fingerprint ofthe user and providing fingerprint information to control unit 110, atimer 235 to count the current date and time, a storage unit 120 tostore a registrant database, an information temporary storage unit 160,a comparison determination unit 170 to determine that sameness betweenthe registrant and the user as well as to determine that the actual ageof the user is at least the program target age, a descramble keygeneration unit 140 to generate a descramble key according to acomparison determination result of comparison determination unit 170, adescramble unit 220 to cancel the scramble of video audio scramblesignal 201 based on the descramble key output at descramble keygeneration unit 140, and a video audio signal output unit 280 to outputthe video audio scramble signal descrambled at descramble unit 220 totelevision set 300.

[0186]FIG. 10 is a flow chart of the descramble process executed bydescrambler 400 according to the second embodiment. In the descrambleprocess, determination is made whether fingerprint data is stored in theregistrant database in storage unit 120 (step S61). When at least onefingerprint data is registered, control proceeds to step S67, otherwise,to step S62.

[0187] At step S62, the secret identification code prestored in theregistrant database in storage unit 120 is read out. A screen includingan image prompting input of a secret identification code is output totelevision set 300 via a video audio signal output unit 280. ReceiverI/F unit 281 receives the secret identification code input through anumeric input unit such as the remote controller of television set 300(step S63).

[0188] The secret identification code received at step S63 is collatedwith the secret identification code read out from storage unit 120 atstep S62 (step S64). When the secret identification codes match, controlproceeds to step S65, otherwise, to step S63.

[0189] At step S65, a screen prompting entry of the fingerprint isoutput to television set 300 from video audio signal output unit 280.The fingerprint is read out by finger printer reader 250 (step S65). Thefingerprint read by fingerprint reader 250 is converted into fingerprintinformation in the form of electronic data to be transmitted to controlunit 110.

[0190] At control unit 110, the received fingerprint information isstored as the fingerprint information of the master registrant in theregistrant database (step S66). Then, control proceeds to step S67.

[0191] At step S67, a screen including the message of “VIEW PAYTELEVISION PROGRAM” and the message of “REGISTRATION OF NEW USER” isoutput from video audio signal output unit 280 to television set 300.The user selects either process by entering a value through a numericinput unit such as a remote controller, whereby information of whichprocess has been selected is received at receiver I/F unit 281. Controlunit 110 determines whether an additional registration process or a paytelevision view process has been selected (step S67). When an additionalregistration process is selected, control proceeds to step S68,otherwise, to step S75.

[0192] At step S68, a screen including a message of, for example,“Please enter fingerprint” is transmitted to television set 300 fromvideo audio signal output unit 280. The user enters his/her fingerprintthrough fingerprint reader 250 according to the displayed message. Onthis occasion, the input fingerprint is the fingerprint of the masterregistrant.

[0193] At step S69, the fingerprint information of the master registrantstored in storage unit 120 is read out. The fingerprint informationobtained by reading out the fingerprint of the user at step S68 iscompared with the fingerprint information of the master registrant readout at step S69 (step S70).

[0194] At step S71, determination is made whether the user and themaster registrant are the same person, based on the comparison result.When determination is made of the sameness, control proceeds to stepS72, otherwise, to step S68.

[0195] At step S72, a screen including a message of, for example,“Please enter date of birth and fingerprint of additional registrant” isoutput to television set 300 via video audio signal output unit 280. Theuser enters the date of birth through a numeric unit such as a remotecontroller, which is received at receiver I/F unit 281 (step S72). Thefingerprint of the additional registrant is read by fingerprint reader250 (step S73).

[0196] Thus, the date of birth and fingerprint information of theadditional registrant are newly stored in the registrant database instorage unit 120 (step S74).

[0197] When a pay television view process is selected at step S67,control proceeds to step S75. The fingerprint of the user is read by afingerprint reader 250 to be stored in information temporary storageunit 160.

[0198] At step S76, fingerprint information stored in the registrantdatabase in storage unit 120 is sequentially read out. The fingerprintinformation of the user obtained by the read out at step S75 is comparedwith the fingerprint information of the registrant read out from storageunit 120 at step S76 (step S77). Determination is made whether the useris the same person as the registrant based on the comparison result(step S78). In the case where the user and the registrant are the sameperson, control proceeds to step S79, otherwise, to step S84.

[0199] At step S79, the program target age information is obtained byprogram attribute signal decoder 270 (step S79). The date of birth ofthe registrant corresponding to the fingerprint information read out atstep S76 is read out from storage unit 120 (step S80). The actual age ofthe registrant is calculated from the current date obtained from timer235 and the date of birth read out from storage unit 120 (step S81). Inthe case where the actual age information is stored in the registrantdatabase in storage unit 120, the actual age information is read outfrom storage unit 120. In this case, the process of steps S80 and S81 isnot required.

[0200] Determination is made whether the calculated actual age is atleast the program target age obtained at step S79 (step S82). Whendetermination is made that the actual age is equal to or above theprogram target age, control proceeds to step S83, otherwise, to stepS85.

[0201] At step S83, a descramble key is generated at descramble keygeneration unit 140. At descramble unit 220, the scramble of video audioscramble signal 201 is canceled using the generated descramble key. Thedescrambled video audio scramble signal is output to television set 300from video audio signal output unit 280 (step S83).

[0202] When determination is made that the user and the registrant arenot the same person at step S78, control proceeds to step S84.Determination is made whether a next registrant is recorded in theregistrant database in storage unit 120. In the case where there is anext registrant, control proceeds to step S76. The process from stepsS76 to step S78 is carried out for the next registrant. In the casewhere there is no next registrant, control proceeds to step S85. Anerror message is output from video audio signal output unit 280 totelevision set 300.

[0203] Since determination of the sameness between the registrant andthe user is made based on the fingerprint which is the physicaldescription in the descrambler of the second embodiment, usage of thedescrambler can be reliably restricted to the intended end user.

[0204] Also, since a plurality of persons admitted of usage of thedescrambler can be registered, pay television can be viewed by any ofthe registrants just through fingerprint entry.

[0205] Furthermore, since determination of the sameness between a userand a registrant is based on a fingerprint, the descramble operation byusers below a specified age with respect to age-restricted programs canbe inhibited reliably.

[0206] Third Embodiment

[0207] Referring to FIG. 11, a pay television system 910 according to athird embodiment of the present invention includes server devices 700A,700B and 700C, a master register device 800, and descramble modules200A, 200B, 200C, 200D, 200E, 200F and 200G.

[0208] Although three server devices 700A, 700B and 700C, one masterregistration device 800, and seven descramble modules 200A, 200B, 200C,200D, 200E, 200F and 200G are shown in FIG. 11, the number of unitsthereof are arbitrary, as long as there is at least one of respectiveunits.

[0209] In pay television system 910 of the third embodiment, the usagecount of pay television IC card 100A is administered by any of serverdevices 700A, 700B and 700C. For the sake of simplification, descriptionis based on the case where server device 700A conducts theadministration. The usage count of pay television IC card 100A isadministered based on a predetermined usage admitted count assigned atthe time of purchasing pay television IC card 100A. The predefined usageadmitted count is decreased according to the count of the viewed paytelevision program transmitted from broadcast station 900. Paytelevision IC card 100A can be used until the usage admitted countdefined thereto becomes lower than the count corresponding to the paytelevision program (required count).

[0210]FIG. 12 is a block diagram of a schematic structure of masterregistration device 800 of the third embodiment. Referring to FIG. 12,master registration device 800 includes a control unit 801 to controlthe entirety of master registration device 800, a temporary storage unit215 used as a work area during execution of a program by control unit801, a registrant information input unit 810 to apply registrantinformation to be recorded into pay television IC card 100A, afingerprint reader 250 to read the fingerprint of a registrant, aninterface unit (I/F unit) 291 to transfer the required information withrespect to pay television IC card 100A, a set up completion signal inputunit 290 to receive a set up completion signal, a timer 235 to count thetime, a data output unit 230B to output fingerprint information and timeinformation to pay television IC card 100A, a network informationinput/output unit 845 for communication with server device 700A via acommunication network 911, and a status notification unit 802 to outputrequired information such as the operation message to the user of themaster register device (the clerk of a dealer) or the like.

[0211] Fingerprint reader 250 includes a charge coupled device (CCD) topick up an image of the fingerprint of the purchaser of pay televisionIC card 100A (registrant). The fingerprint is converted into electricalimage data and provided to control unit 801. The output image data basedon the image of the read fingerprint from fingerprint reader 250 iscalled fingerprint information. Fingerprint information is temporarilystored in temporary storage unit 215, and then transmitted to paytelevision IC card 100A by fingerprint information output unit 231 or toseveral device 700A via network information input/output unit 845.

[0212] Set up completion signal input unit 290 receives the set upcompletion signal output from set up completion signal output unit 190of pay television IC card 100A, and provides the set up completionsignal to control unit 801. The set up completion signal indicates thatpay television IC card 100A is connected to master registration device800 and pay television IC card 100A attains an operable state.Therefore, determination can be made that pay television IC card 100A isinserted in master registration device 800 during the period of time aset up of completion signal is received from set up completion signalinput unit 290 at control unit 801.

[0213] Registrant information input unit 810 receives input ofindividual information such as the date of birth, address, name and thelike of the purchaser of pay television IC card 100A. Registrantinformation input unit 810 includes a keyboard, a tablet, or the like,and can be provided independent of master registration device 800. Inthis case, communication with master registration device 800 may beestablished through cable or radio connection.

[0214] Network information input/output unit 845 is the networkinterface to communicate with any of server devices 700A, 700B, and700C. Communication between master registration device 800 and serverdevices 700A, 700B, and 700C is effected via network informationinput/output unit 845.

[0215] I/F unit 291 is connected to I/F 191 of pay television IC card100A, that will be described afterwards. When a set up completion signalis supplied to set up completion signal input unit 290, input/output ofpredetermined information to/from pay television IC card 100A isallowed.

[0216] Timer 235 counts the current date and time. The output of timer235 is provided to time information output unit 236 as the date and timeinformation, and further provided to pay television IC card 100A fromtime information output unit 236.

[0217] Data output unit 230B includes a fingerprint information outputunit 231 and a time information output unit 236. Fingerprint informationoutput unit 231 outputs to pay television IC card 100A the fingerprintinformation read out by fingerprint reader 250 and stored in temporarystorage unit 215. Time information output unit 236 outputs the currentdate from timer 235 to pay television IC card 100A.

[0218] Status notification unit 802 is a display or speaker to informvisually or audibly an error signal or instruction signal received fromserver device 700A or from pay television IC card 100A under control ofcontrol unit 801. By the visual or audible notification by statusnotification unit 802, the seller or purchaser of pay television IC card100A is instructed of the next operation or provided with an errormessage in the process of purchasing a pay television IC card 100 thatwill be described afterwards.

[0219] Recording medium 299 records the program to be executed atcontrol unit 801. Master registration device 800 reads out the programrecorded in recording medium 299 to execute a process according to theread program.

[0220]FIG. 13 is a block diagram of a schematic structure of descramblemodule 200A according to the third embodiment. Referring to FIG. 13,descramble module 200A includes a control unit 210 to control theentirety of descramble module 200A, a temporary storage unit 215 used asa work area during execution of a program or the like by control unit210, a video audio scramble signal 201 transmitted from a broadcaststation, a broadcast information input unit 240A receiving an encryptedprogram attribute signal 203 and an encrypted required count signal, aprogram attribute signal decoder 270 decoding encrypted programattribute signal 203, a required count information decoder 275 to decodeencrypted required count signal 205, a descramble unit 220 to cancel thescramble of video audio scramble signal 201, a descramble key input unit260 to receive a descramble key from pay television IC card 100A, avideo audio signal output unit 280 to output video audio signal 202 fromdescramble unit 220 to television set 300, a receiver interface unit 281to transfer/receive information to/from television set 300, afingerprint reader 250 to read out the fingerprint of a user, aninterface unit 291 to transmit/receive the required information to/frompay television IC card 100A, a set up completion signal input unit 290receiving a set up completion signal, and a data output unit 230A tooutput fingerprint information, program target age information, timeinformation, and an account enable signal to pay television IC card100A.

[0221] Broadcast information input unit 240A receives encrypted programattribute signal 203 output from broadcast station 900, and encryptedrequired count signal 205 and video audio scramble signal 201. Broadcastinformation input unit 240A provides encrypted program attribute signal203 to program attribute signal decoder 270, encrypted required countsignal 205 to required count information decoder 275, and video audioscramble signal 201 to descramble unit 220.

[0222] Program attribute signal decoder 270 decodes encrypted programattribute signal 203 received from broadcast information input unit240A, and provides the program attribute signal to control unit 210. Theprogram attribute signal includes information related to thebroadcasting program. For example, information to restrict the age ofthe audience of the program is included.

[0223] Required count information decoder 275 decodes encrypted requiredcount signal 205 received from broadcast information input unit 240, andprovides the required count signal to control unit 210. The requiredcount signal includes the count value required to view the paytelevision program. The required count is a value corresponding to a paytelevision program, and subtracted from the usage admitted count definedin pay television IC card 100A when the pay television program isviewed. The required count of the required count signal is output to anyof server devices 700A, 700B and 700C by network informationinput/output unit 245 that will be described afterwards.

[0224] Video audio scramble signal 201 is a signal having the videoportion and audio portion scrambled. The video audio scramble signal istransmitted on a program-by-program basis. Information related to aprogram is the program attribute, included in the program attributesignal. The program attribute signal includes program target ageinformation indicating a specified age when the audience of the programis limited in age. The program target age information from the programattribute signal is output to pay television IC card 100A from programtarget age information output unit 232 of data output unit 230A.

[0225] Descramble unit 220 cancels the scramble of video audio scramblesignal 201 received from broadcast information input unit 240A. Thedescramble key required in canceling the scramble is received from adescramble key input unit 260. Therefore, descramble unit 220 cannotcancel the scramble of video audio scramble signal 201 unless adescramble key is received from the scramble key input unit 260. Inother words, the scramble of video audio scramble signal 201 is canceledonly when a descramble key is received by descramble key input unit 260,whereby a video audio signal 202 is output to video audio signal outputunit 280.

[0226] Fingerprint reader 250 includes a charge coupled device (CCD) topick up an image of the fingerprint of the user of descramble module200A, which is converted into electrical image data to be output tocontrol unit 210. Fingerprint information is temporarily stored intemporary storage unit 215. Fingerprint information is transmitted topay television IC card 100A from fingerprint information output unit231, or transmitted to server device 700A via network informationinput/output unit 845.

[0227] Descramble key input unit 260 receives a descramble key from paytelevision IC card 100A, and provides the descramble key to descrambleunit 220. Descramble key input unit 260 outputs a descramble key todescramble unit 220 as long as a descramble key is received from paytelevision IC card 100A.

[0228] I/F unit 291 is connected to I/F unit 191 of pay television ICcard 100A, and allows input/output of predetermined information to/frompay television IC card 100A.

[0229] Set up completion signal input unit 290 receives and provides tocontrol unit 210 a set up completion signal output from set upcompletion signal output unit 190 of pay television IC card 100A. Theset up completion signal indicates that pay television IC card 100A isconnected to descramble module 200A, and pay television IC card 100A isoperable. Therefore, determination can be made at control unit 210 thatpay television IC card 100A is loaded at descramble module 200A duringreception of a set up completion signal from set up completion signalinput unit 290.

[0230] Timer 235 counts the current date and time. The output of timer235 is provided to time information output unit 236 as the date and timeinformation. This information is output to pay television IC card 100Afrom time information output unit 236.

[0231] Receiver I/F unit 281 receives numerical information inputthrough a numeric input unit provided at television set 300. Thereceived numeric information is provided to control unit 210. Thenumeric input unit provided at television set 300 includes an inputbutton or remote controller furnished to television set 300. The inputnumeric information includes a secret identification code and date ofbirth. In order to prompt the user to input of numeric information, ascreen prompting input can be output to television set 300 from videoaudio signal output unit 280.

[0232] Network information input/output unit 245 is a network interfaceto communicate with any of server devices 700A, 700B and 700C.Communication between descramble module 200A and server devices 700A,700B and 700C is conducted via network information input/output unit245.

[0233] Recording medium 299 records a program to be executed by controlunit 210. Descramble module 200A reads out the program from recordingmedium 299 to execute a process according to the read program.

[0234]FIG. 14 is a block diagram showing a detailed structure of dataoutput unit 230A of descramble module 200A. Referring to FIG. 14, dataoutput unit 230A includes a print information output unit 231, a programtarget information output unit 232, a time information output unit 236,and an account enable signal output signal 237.

[0235] Fingerprint information output unit 231 provides the fingerprintinformation stored in temporary storage unit 215 to pay television ICcard 100A. Program target age information output unit 232 providesprogram target age information from the program attribute signal decodedat program attribute signal decoder 270 to pay television IC card 100A.Time information output unit 236 outputs the current date counted bytimer 236 to pay television IC card 100A. At account enable signaloutput unit 237, the account enable signal received from server device700A at network information input/output unit 245 is provided to paytelevision IC card 100A.

[0236]FIG. 15 is a block diagram showing a schematic structure of paytelevision IC card 100A of the third embodiment. Referring to FIG. 15,pay television IC card 100A includes a control unit 110 to control theentirety of pay television IC card 100A, a storage unit 120A to storeinformation related to the registrant, a data input unit 130A to receiverequired information from master registration device 800 or descramblemodule 200A, a set up completion signal output unit 190 to output a setup completion signal when connection with master registration device 800or descramble module 200A is established, an information temporarystorage unit 160, a comparison determination unit 170 performing acomparison determination process based on information stored ininformation temporary storage unit 160, a descramble key generation unit140A to generate a descramble key based on the comparison determinationresult from comparison determination unit 170, a descramble key outputunit 180 to output the generated descramble key to descramble module200A, and an interface unit 191A connected to master registration device800 or descramble module 200A to input/output required information.

[0237] When the power of descramble module 200 and descramble module200A is turned on and the user of pay television IC card 100A insertsthe IC card into descramble module 200A, power is supplied fromdescramble module 200A to pay television IC card 100A. Pay television ICcard 100A supplied with power is turned ON, and a reset operation isinitiated. This reset operation is under control of control unit 110.Following completion of the power on and reset operation of paytelevision IC card 100A under control of control unit 110, a set upcompletion signal is output to set up completion signal input unit 290from set up completion signal output unit 190.

[0238] When the clerk of the dealer of pay television IC card 100Ainserts pay television IC card 100A into master registration device 800after the power of master registration device 800 is turned ON, power issupplied from master registration device 800 to pay television IC card100A. The powered pay television IC card 100A is turned ON, and a resetoperation is initiated. This reset operation is under control of controlunit 111. Upon completion of the power on and reset operation of paytelevision IC card 100A under control of control unit 110, a set upcompletion signal is output to set up completion signal input unit 290from set up completion signal output unit 190.

[0239] Data input unit 130A includes a time information input unit 131,a fingerprint information input unit 132, a program target ageinformation input unit 133, and an account enable signal output unit134.

[0240] When pay television IC card 100A is inserted into descramblemodule 200A, time information input unit 131 is connected to timeinformation output unit 236 of descramble module 200A to receive thecurrent date and time counted at timer 235 from time information outputunit 236. The received date and time information is output to controlunit 110. When pay television IC card 100A is inserted into masterregistration device 800, time information input unit 131 is connected totime information output unit 236 of master registration device 800 toreceive the current date and time counted at timer 235 from timeinformation output unit 236.

[0241] When pay television IC card 100A is inserted into descramblemodule 200A, fingerprint information input unit 132 is connected withfingerprint information output unit 231 of descramble module 200A.Fingerprint information is received from fingerprint information outputunit 231 to be provided to control unit 110. When pay television IC card100A is inserted into master registration device 800, connection withfingerprint information output unit 231 of master registration device800 is established. Fingerprint information is received from fingerprintinformation output unit 231 to be provided to control unit 110.

[0242] When pay television IC card 100A is inserted into descramblemodule 200A, program target age information input unit 133 is connectedwith program target age information output unit 232 of descramble module200A. Program target age information is received from program target ageinformation output unit 232 of descramble module 200A to be provided tocontrol unit 110.

[0243] When pay television IC card 100A is inserted into descramblemodule 200A, account enable signal input unit 134 is connected withaccount enable signal output unit 237 of descramble module 200A. Theaccount enable signal is received from account enable signal output unit237 of descramble module 200A to be output to control unit 110.

[0244] Storage unit 120A includes a registrant database that records theperson whose audience of a pay television program is admitted as aregistrant. The registrant database has a service number assigned toeach registrant, fingerprint information of the registrant, date ofbirth information, actual age information, address information, and nameinformation stored in correspondence with each registrant. A server IDand a server password are stored in storage unit 120A. The contentsstored in storage unit 120A will be described in detail afterwards.

[0245] Storage unit 120A is preferably a memory that cannot be rewrittenonce information is programmed. Preferably, storage unit 120A is amemory that requires a rewrite admission signal for rewriting, or a fusetype memory.

[0246] Information temporary storage unit 160 is a random access memory,temporarily storing fingerprint information of the user received atfingerprint information input unit 132, fingerprint information of theregistrant stored in storage unit 120A, program target informationreceived at program target age information input unit 133, and theactual age of the registrant stored in storage unit 120A.

[0247] Comparison determination unit 170 compares the fingerprintinformation obtained by reading out the fingerprint of the user with thefingerprint information of the registrant stored in storage unit 120A todetermine whether the user and the registrant are the same person. Whenprogram target age information is stored in information temporarystorage unit 160, comparison determination unit 170 compares the programtarget age information with the actual age of the registrant stored instorage unit 120A. Comparison determination unit 170 outputs anadmission signal to descramble key generation unit 140 whendetermination is made of the sameness between the user and theregistrant, or in the case where program target age information isstored in information temporary storage unit 160, when determination ismade that the user is the same person as the registrant and the actualage is equal to or higher than the value of the program target ageinformation. The details of comparison determination unit 170 has beendescribed with reference to FIG. 5 already. Therefore description willnot be repeated here.

[0248] Descramble key generation unit 140A generates a descramble key onthe condition that an admission signal is received from comparisondetermination unit 170 and an account enable signal is received fromcontrol unit 110. The generated descramble key is output to descramblekey output unit 180. In the case where key information to generate adescramble key is transmitted from a transmission station, thetransmitted key information is received, and a descramble key isgenerated using the received key information.

[0249] Descramble key output unit 180 outputs the received descramblekey to descramble input unit 260 of descramble module 200A.

[0250] Recording medium 199 stores the program to be executed by controlunit 110. Pay television IC card 100A reads out the program fromrecording medium 199 to execute the process according to the read outprogram.

[0251]FIG. 16 is a diagram to describe information stored in storageunit 120A of pay television IC card 100 of the third embodiment.Referring to FIG. 16, a service number 121, print information 122, dateof birth information 123, and actual age information 124 are stored foreach registrant in storage unit 120A. Also, address information 126 andname information 127 are stored for the master registrant. Furthermore,a server ID 127 and a server password 128 of corresponding server device700A is stored in descramble module 200A. The master registrant is theperson whose information is stored in server 700A by master registrationdevice 800 when pay television IC card 100A is purchased. Registrationto server 700A will be described afterwards.

[0252] Service number 121 of the master registrant is a cardidentification number to identify pay television IC card 100A. Server ID127 is the identification number to identify server device 700A thatadministers the usage admitted count assigned to pay television IC card100A. The server password is a password to verify whether the paytelevision IC card is a proper one or not at server devices 700A, 700Band 700C. Service number 121 of the master registrant, the server ID andserver password are assigned to each pay television IC card 100A andstored in storage unit 120A before pay television IC card 100A is sold.A different service number of the master registrant is assigned for eachpay television IC card 100A. In the present invention, the servicenumber can include symbols in addition to numbers.

[0253] A service number 121 for a registrant other than the masterregistrant is assigned for each registrant by control unit 110. Servicenumber 121 differs for each registrant in the registrant database.

[0254] Therefore, pay television IC card 100A has the master registrantservice number 121, server ID and server password stored in storage unit120A, at the stage prior to being sold. This information can also bestored by server device 700A that administers the usage admitted countof pay television IC card 100A.

[0255] Fingerprint information 122 of the master registrant is thefingerprint information obtained by reading the fingerprint of aregistrant through fingerprint reader 250 of master registration device800. The date of birth information 123, address information 126, andname information 127 of the master registrant are the date of birthinformation, address information, and name information input throughregistrant information input unit 810 of master registration device 800.

[0256] Fingerprint information of a registrant other than the masterregistrant is the fingerprint information obtained by reading thefingerprint of a registrant through fingerprint reader 250 of descramblemodule 200A, as will be described in the registration process of anadditional registrant. Date of birth information 123 is input through anumeric input unit such as a remote controller to be received atreceiver I/F unit 281 to be stored.

[0257] Actual age information 124 is calculated and stored based on thedate of birth information and date information of the registration dateby control unit 110. Control unit 110 calculates the actual age of theregistrant using the current date received from time information inputunit 131 and date of birth information 123 stored in storage unit 120A.The actual age is stored in the region of actual age information 124 ofthe registrant database in storage unit 120A. Calculation of the actualage information by control unit 110 may be carried out every time poweris supplied to pay television IC card 100A, or at a predeterminedinterval, for example, every day.

[0258]FIG. 16 corresponds to the case where four registrants arerecorded in the registrant database. The registrant whose service numberis “MT0011” is the master registrant. The data of the master registrantincludes address information 126 and name information 127 in addition tofingerprint information 122, date of birth information 123 and actualage information 124. The registrants whose service numbers are “AT0011”,“AT0012” and “AT0013” are additional registrants. The data of theadditional registrant includes a service number, fingerprintinformation, date of birth information and actual age information.

[0259]FIG. 16 shows an example where data of three additionalregistrants are stored in addition to the data of the master registrant.The registrant database does not necessarily have to store data of anadditional registrant. Data of at least the master registrant is to bestored.

[0260] Server devices 700A, 700B and 700C will be described hereinafter.Server devices 700A, 700B and 700C can be formed of personal computers.Since each capability is identical, description of service device 700Awill be provided representative thereof.

[0261]FIG. 17 is a block diagram of schematic structure of server device700A of the third embodiment. Referring to FIG. 17, server device 700Aincludes a control unit 730 to control the entirety of server device700A, a network information input/output unit 735, a user dataadministration unit 710 connected to control unit 730 via bus 750, aconnection permit information storage unit 720 directly connected tocontrol unit 730, a temporary storage unit 170 used as a work areaduring execution of a program by control unit 801, and a comparison unit760.

[0262] Network information input/output unit 735 is a network interfaceto communicate with master registration device 800 or descramble module200A. Communication between server device 700A and master registrationdevice 800 or descramble module 200A is effected via network informationinput/output unit 735.

[0263] Connection permit information storage unit 720 stores a server ID721 and a server password 722, which are assigned to server device 700A,in a one-to-one correspondence. Server ID 721 and server password 722stored in connection permit information storage unit 720 are informationused to enable access to server device 700A.

[0264] As mentioned above, server ID 128 and server password 129 arestored in storage unit 120A of pay television IC card 100A. At masterregistration device 800 or descramble module 200A, server ID 128 andserver password 129 stored in storage 120A of pay television IC card100A are received. The server device that administers the usage admittedcount of pay television IC card 100A is identified based on server ID128. The received server ID 128 and server password 129 are transmittedto the identified server device. At the server device, the receivedserver ID 128 and server password 129 are collated with server ID 701and server password 722, respectively, stored in connection permitinformation storage unit 720 to determine whether access from masterregistration device 800 or descramble module 200A is allowed or not.When access is accepted, access to user data administration unit 710 isallowed.

[0265] In the present embodiment, it is assumed that the server deviceidentified by server ID 128 is server device 700A.

[0266] Comparison unit 760 includes a service number comparison unit761, a server ID comparison unit 762, a count comparison unit 763, aserver password comparison unit 764, a name information comparison unit765, a fingerprint information comparison unit 766, an addressinformation comparison unit 767, and a date of birth informationcomparison unit 768.

[0267] User data administration unit 710 stores user data. The user datais stored corresponding to the number of pay television IC card 100Athat has the usage admitted count administered at server device 700A.

[0268]FIG. 18 shows an example of user data stored in user dataadministration unit 710 of the server device in the third embodiment.User data administration unit 710 stores user data including servicenumber 712, fingerprint information 713, date of birth information 714,address information 715, name information 716, and usage admitted count717. Service number 712 is a number required to identify pay televisionIC card 100A. Since this service number is assigned for each paytelevision IC card 100A, a plurality of user data corresponding innumber to the number of pay television IC card 100A will be stored.Service number 712 is stored in storage unit 120A of pay television ICcard 100A and in user data administration unit 710 before pay televisionIC card 100 is sold. Therefore, pay television IC card 100A loaded inmaster registration device 800 or descramble module 200A can beidentified by server device 700A based on the service number receivedfrom master registration device 800 or descramble module 200A.

[0269] Usage admitted count 717 is assigned to pay television IC card100A, indicating the count allowed of audience of a pay televisionprogram through pay television IC card 100A. The usage admitted counthas the count corresponding to the viewed pay television programsubtracted and updated every time a pay television program is viewedusing pay television IC card 100A. This process will be describedafterwards. The initial value of the usage admitted count is recorded inuser data administration unit 710 before pay television IC card 100A issold.

[0270] Fingerprint information 713, date of birth information 714 andaddress information 715 are the fingerprint information, date of birth,and address of the master registrant input at registrant informationinput unit 810 of master registration device 800. Fingerprintinformation 713, date of birth information 714 and address information715 are stored in user data administration unit 710 at the time when paytelevision IC card 100A is sold.

[0271]FIG. 19 is a block diagram of a detailed structure of comparisonunit 760 of server device 700A. Referring to FIG. 19, comparison unit760 includes a service number comparison unit 761, a server IDcomparison unit 762, a count comparison unit 763, a server passwordcomparison unit 764, a name information comparison unit 765, afingerprint information comparison unit 766, an address informationcomparison unit 767, and a date of birth information comparison unit768.

[0272] Service number comparison unit 761 compares service number 712 ofthe user data stored in user data administration unit 710 with servicenumber 121 of the master registrant stored in storage unit 120A of paytelevision IC card 100A. Service number 121 of the master registrant istransmitted from master registration device 800 or descramble module200A.

[0273] Server ID comparison unit 762 compares server ID 721 stored inconnection permit information storage unit 720 with server ID 128 storedin storage unit 120A of pay television IC card 100A. Server ID 128stored in storage unit 120A of pay television IC card 100A istransmitted from master registration device 800 or descramble module200A.

[0274] Count comparison unit 763 compares usage admitted count 717 ofthe user data stored in user data administration unit 710 with therequired count received from descramble module 200A.

[0275] Server password comparison unit 764 compares server password 722stored in connection permit information storage unit 720 with serverpassword 129 stored in storage unit 120A of pay television IC card 100A.Server password 129 stored in storage unit 120A of pay television ICcard 100A is transmitted from master registration device 800 ordescramble module 200A.

[0276] Name information comparison unit 765 compares name information716 of the user data stored in user data administration unit 710 withthe name information received from master registration device 800.

[0277] Fingerprint information comparison unit 766 compares fingerprintinformation 713 of the user data stored in user data administration unit710 with fingerprint information transmitted from master registrationdevice 800 or descramble module 200A. Fingerprint information istransmitted from master registration device 800 when pay television ICcard 100A is newly purchased. Fingerprint information is transmittedfrom descramble module 200A when a program is to be watched using paytelevision IC card 100A.

[0278] Address information comparison unit 767 compares the user dataaddress information 715 stored in user data administration unit 710 withthe address information received from master registration device 800.

[0279] Date of birth information comparison unit 768 compares date ofbirth information 714 of the user data stored in user dataadministration unit 710 with the date of birth information received frommaster registration device 800.

[0280] Comparison unit 760 may be embodied by hardware, or by executingsoftware through control unit 730.

[0281] Recording medium 799 stores the program to be executed by controlunit 730. Server device 700A reads out the program stored in recordingmedium 799 to execute a process according to the program read out.

[0282] (1) Process when Pay Television IC Card 100A is Purchased

[0283] The process executed by pay television system when pay televisionIC card 100A is purchased according to the third embodiment will bedescribed hereinafter.

[0284] The user purchases a pay television IC card 100 at a dealer wheremaster registration device 800 is installed. On this occasion, paytelevision IC card 100A that is to be sold is loaded in masterregistration device 800. Communication is effected between masterregistration device 800 and server device 700A, whereby a process ofcorrelating pay television IC card 100A that is the selling object withthe user is executed. Here, description is based on server device 700A.In the case where the usage admitted count of pay television IC card100A is administered by another server device 700B or 700C,communication is established between master registration device 800 andthe server device that administers the usage admitted count.

[0285] Pay television IC card 100A is easily detachable with respect tomaster registration device 800. Pay television IC card 100A receivespower from master registration device 800 by being loaded to masterregistration device 800. Connection between pay television IC card 100Aand master registration device 800 may be established by the non-contacttype or contact type connection method.

[0286]FIGS. 20A and 20B are flow charts of the process executed at paytelevision system of the third embodiment when pay television IC card100A is to be purchased. In FIGS. 20A and 20B, respective processesexecuted at pay television IC card 100A, master registration device 800and server device 700A are shown. The dotted line in FIGS. 20A and 20Bdenotes the data flow.

[0287] A user purchases a pay television IC card 100A at the dealerwhere master registration device 800 is installed. On this occasion, thepurchaser submits an ID card or the like that has his/her address, nameand date of birth described at the dealer. The name, address and date ofbirth are information required for registration by server device 700A.

[0288] The clerk of the dealer turns on the power of master registrationdevice 800, and establishes in advance a connectable state with serverdevices 700A, 700B and 700C via communication network 911. Uponinserting pay television IC card 100A into master registration device800 at this stage, power is supplied from master registration device 800to pay television IC card 100A. Pay television IC card 100A to whichpower is supplied is powered on, i.e. a reset operation is initiated.This operation is under control of control unit 110. Then, determinationis made whether set up has been completed or not (step S101). Thisdetermination is based whether the power on and reset operation has beencompleted or not. When the set up operation has been completed, a set upcompletion signal is output to master registration device 800 from setup completion signal output unit 190 (step S102).

[0289] When pay television IC card 100A does not attain a set up state,a signal indicating an inactive state is output from set up completionsignal output unit 190. In an inactive state, data input unit 130Aprovided in pay television IC card 100A and data output unit 230B inmaster registration device 800 are both inactive. This means that aninput signal cannot be accepted at control unit 110 even if anexternally applied input signal is provided. No information is outputfrom data output unit 230B.

[0290] When appropriate, a set up completion signal indicating an activestate is output from set up completion signal output unit 190, which isreceived at set up completion signal input unit 290 of masterregistration device 800 (step S121). Then, control proceeds to stepS122. Accordingly, data input unit 130A of pay television IC card 100Aand data output unit 230B of master registration device 800 both attainan active state. Information can be transferred between pay televisionIC card 100A and master registration device 800.

[0291] At pay television IC card 100A, determination is made whetherfingerprint information 120 is stored in storage unit 120A (step S103).When fingerprint information 122 is stored, the process ends (stepS111), otherwise, control proceeds to step S104.

[0292] At the stage before pay television IC card 100A is sold, aservice number 121 to identify pay television IC card 100A (the servicenumber of the master registrant), server ID 128 and server password 129are stored in storage unit 120A. Fingerprint information 122, date ofbirth information 123, actual age information 124, address information126 and name information 127 are not yet recorded. Data of a registrantother than the master registrant is not stored. No storage offingerprint information 122 in storage unit 120A implies a stage priorto the selling of pay television IC card 100A. This indicates that thecorrespondence between pay television IC card 100A and a registrant isnot conducted by server device 700. Storage of fingerprint information122 in storage unit 120A implies that pay television IC card 100A hasbeen purchased and correspondence between that pay television IC card100A and a registrant has already been made.

[0293] At step S104, a write preparation completion signal is outputfrom I/F unit 191A to master registration device 800. The writepreparation completion signal is received at I/F unit 291 of masterregistration device 800 (step S122). In response to reception of a writepreparation completion signal, master registration device 800 outputs aregistration preparation completion signal to server device 700A fromnetwork information input/output unit 845 via communication network 911(step S123).

[0294] The registration preparation completion signal is received atnetwork information input/output unit 735 of server device 700A (stepS141). Server device 700A attains a standby state until the registrationpreparation completion signal is received (NO at step S141). Uponreception of a registration preparation completion signal (YES at stepS141), a signal requesting transmission of the server ID and the serverpassword is output to master registration device 800 (step S142).

[0295] The output server ID and server password transmission requestsignal is received at network information input/output unit 845 atmaster registration device 800 (step S124). The received server ID andserver password transmission request signal is output to control unit801. Control unit 801 provides the server ID and server passwordtransmission request signal to pay television IC card 100A from I/F unit291 (step S125).

[0296] The output server ID and server password transmission requestsignal is received at I/F unit 191A (step S105). The received server IDand server password transmission request signal is output to controlunit 110. Control unit 110 reads out server ID 128 and server password129 stored in storage unit 120A, and outputs the read out server ID 128and server password 129 to master registration device 800 from I/F unit191A (step S106).

[0297] The output server ID 128 and server password 129 are received atI/F unit 291 (step S126). The received server ID 128 and server password129 are output to control unit 801. Control unit 801 dispatches serverID 128 and server password 129 from network information input/outputunit 845 to server device 700A (step S127).

[0298] The output server ID 128 and server password 129 are received atnetwork information input/output unit 735 (step S143), and provided tocontrol unit 730. Control unit 730 reads out server ID 721 and serverpassword 722 stored in connection permit information storage unit 720for comparison with the received server ID 128 and server password 129(step S144). This collocation is conducted at server ID comparison unit762 of comparison unit 760 and server password unit 764.

[0299] When at least either the server ID or server password indicates amismatch as a result of collocation, control unit 730 outputs an errorsignal from network information input/output unit 735 to masterregistration device 800 (step S159), and the operation of server device700 ends (step S158). The output error signal is received at networkinformation input/output unit 845 (step S139), and provided to controlunit 801. Control unit 801 receiving the error signal issues aninstruction to display server error through status notification unit802. An error signal is output from I/F unit 291 to pay television ICcard 100A (step S138). Then, the process ends (step S137).

[0300] The output error signal is received at I/F unit 191A (step S112)and provided to control unit 110. In response, control unit 110terminates the process (step S111).

[0301] When both the server ID and server passwords match at step S144,(YES at step S144), control unit 730 and user data administration unit710 both attain an active state via a bus 750. At the same time, aservice number transmission request signal is dispatched to masterregistration device 800 from network information input/output unit 735(step S145).

[0302] The service number transmission request signal is received atnetwork information input/output unit 845 of master registration device800 via communication network 911 (step S128), and provided to controlunit 801. Control unit 801 outputs the service number transmissionrequest signal to pay television IC card 100A from I/F unit 291 (stepS129).

[0303] The output service number transmission request signal is receivedat I/F unit 191A (step S107), and provided to control unit 110. Inresponse, control unit 110 provides the service number prestored instorage unit 120A to master registration device 800 from I/F unit 191A(step S108).

[0304] The output service number is received at I/F unit 291 (stepS130), and provided to control unit 801. Control unit 801 dispatches theinput service number to server device 700A from network informationinput/output unit 845 (step S131).

[0305] The dispatched service number is received at network informationinput/output unit 735 via communication network 911 (step S146), andoutput to control unit 730. Control unit 730 reads out service number712 stored in user data administration unit 710 (step S147), andcompares the read out number with the service number received at stepS136 (step S148). This comparison is conducted at service numbercomparison unit 761 of comparison unit 760.

[0306] When the service numbers do not match as a result of comparisonby service number comparison unit 761, the count n of the remainingservice numbers stored in user data administration unit 710 (remainingnumber count of service numbers) is calculated (step S149) in order toread out the next service number. At step S150, determination is madewhether the calculated remaining count n is “0” or not. When n is “0”,control proceeds to step S159, otherwise, to step S147 to read out thenext service number. The comparison process of step S148 is executed forall the service numbers stored in user data administration unit 710until a service number that matches the service number received at stepS146 is read out in the process of step S147 to step S150.

[0307] When the service numbers match as a result of comparison at stepS148, control unit 730 attains an active state that allows access viabus 750 to only the user data corresponding to the matching servicenumber among the user data stored in user data administration unit 710.Simultaneously, control unit 730 dispatches an input admission signal tomaster registration device 800 from network information input/outputunit 735 (step S151).

[0308] Matching of the service number means that the service number ofthe user data matches the service number stored in storage unit 120A ofpay television IC card 100A. Therefore, correspondence is set betweenpay television IC card 100A and the user data including the servicenumber that matches the service number stored in storage unit 120A ofthat pay television IC card 100A. For the sake of simplification, it isassumed that the service number stored in storage unit 120A of paytelevision IC card 100A is “MT0014”. On this occasion, user data 711Dwith the service number of “MT0014” corresponds to pay television ICcard 100A. At this stage, fingerprint information 713, date of birthinformation 714, address information 715 and name information 716 ofuser data 711D has no description set therein, as shown in FIG. 18.

[0309] The dispatched input admission signal is received at networkinformation input/output unit 845 (step S132), and output to controlunit 801. Control unit 801 instructs status notification unit 802 todisplay a message such as “Please enter address, name, date of birth andfingerprint” (step S133).

[0310] The dealer of pay television IC card 100A responds to thedisplayed message through status notification unit 802 to enter theaddress, name, and date of birth through registrant information inputunit 810 based on an ID or the like submitted by the purchaser of paytelevision IC card 100A. Accordingly, the address, name and date ofbirth are applied to registrant information input unit 810 (step S134),whereby the address information, name information, and date of birthinformation are output to control unit 801.

[0311] Then, the fingerprint of the purchaser is taken throughfingerprint reader 250. Thus, the fingerprint of the purchaser is readby fingerprint reader 250 (step S135). The read fingerprint informationis output to control unit 801.

[0312] Control unit 801 transmits the address information, nameinformation, date of birth information, and fingerprint information toserver device 700A and pay television IC card 100A (step S136). Toserver device 700A, control unit 801 transmits the address information,name information, date of birth information and fingerprint informationfrom network information input/output unit 845. The output addressinformation, name information, date of birth information and fingerprintinformation are received at network information input/output unit 735 ofserver device 700A. To pay television IC card 100A, control unit 801provides the address information, name information and date of birthinformation from I/F unit 291, and the fingerprint information fromfingerprint information output unit 231.

[0313] The process on the part of pay television IC card 100A will bedescribed first. The fingerprint information output from masterregistration device 800 is applied to fingerprint information input unit132 of pay television IC card 100A (step S109), and output to controlunit 110. The address information, name information and date of birthinformation output from master registration device 800 are applied toI/F 191A of pay television IC card 100A (step S109), and provided tocontrol unit 110.

[0314] Control unit 110 stores the input address information, nameinformation, date of birth information and fingerprint information inthe regions of address information 126, name information 127, date ofbirth information 123 and fingerprint information 122 in storage unit120A (step S110). The recorded information here is the data of themaster registrant. Therefore, the address information, name information,date of birth information and fingerprint information are stored incorrespondence with a predefined service number required to identify paytelevision IC card 100A.

[0315] Following the above-described registration, a record completionsignal from pay television IC card 100A is output to I/F unit 291 ofmaster registration device 800 from I/F unit 191. Then, the process ends(step S111).

[0316] The process on the part of server device 700A will be describedhere. The address information, name information, date of birthinformation and fingerprint information output from master registrationdevice 800 are received at network information input/output unit 735 ofserver device 700A (step S152), and output to control unit 730.

[0317] Control unit 730 temporarily stores the input addressinformation, name information, date of birth information and fingerprintinformation in temporary storage unit 740. Then, control unit 730 readsout name information 716 of the user data stored in user dataadministration unit 710 to compare with the name information temporarilystored in temporary storage unit 740 (step S153). This comparison isexecuted at name information comparison unit 765 of comparison unit 760.Control unit 730 reads out the name information 716 of the user datastored in user data administration unit 710 for comparison with the nameinformation temporarily stored in temporary storage unit 740 (stepS153). This comparison is executed at name information comparison unit765 of comparison unit 760, and performed for all user data 711A, 711Band 711C stored in user data administration unit 710. When there is atleast one matching name information as a result of comparison, controlunit 730 stores the entire user data with the matching name informationin temporary storage unit 740.

[0318] Control unit 730 compares the date of birth information of theuser data with the matching name information stored in temporary storageunit 740 with the date of birth information in temporary storage unit740 received at step S152. This comparison is executed by date of birthinformation comparison unit 768 of comparison unit 760 with respect toall user data with the matching name information. In the case wherethere is at least one date of birth information that matches as a resultof comparison, control unit 730 stores the entire user data with thematching name information and date of birth information in temporarystorage unit 740.

[0319] Control unit 730 compares the address information of the userdata with the matching name information and date of birth informationstored in temporary storage unit 740 with the address information intemporary storage unit 740 received at step S152. This comparison isexecuted at address information comparison unit 767 of comparison unit760 for all user data having the same name information and date of birthinformation. When there is at least one address information that matchesas a result of comparison, control unit 730 stores the entire user datawith the matching date of birth information and address information intemporary storage unit 740.

[0320] Control unit 730 also compares the fingerprint information of theuser with the matching name information, date of birth information andaddress information stored in temporary storage unit 740 with thefingerprint information in temporary storage unit 740 received at stepS152. This comparison is executed at fingerprint information comparisonunit 766 of comparison unit 760 for all user data having the same nameinformation, date of birth information and address information. Whenthere is fingerprint information that matches as a result of comparison,control unit 730 stores the user data with the matching nameinformation, date of birth information, address information andfingerprint information in temporary storage unit 740.

[0321] When user data having the matching name information, date ofbirth information, address information and fingerprint information isstored in temporary storage unit 740 (YES at step S153), the usageadmitted count of the user data stored in temporary storage unit 740 isextracted (step S154). For the sake of simplification, it is assumedthat the user data with the matching name information, date of birthinformation, address information and fingerprint information is userdata 711A. It is also assumed that the usage admitted count in user data711A is “150”.

[0322] The comparison process of the name, date of birth, address, andfingerprint at step S153 is performed to determine whether user data ofthe purchaser of pay television IC card 100A is present as the user datacorresponding to a previously purchased pay television IC card 100A ofthe same person. Although comparison of at least the fingerprintinformation may be suffice to determine the same person, comparison ofthe name information, date of birth information and address informationis conducted prior to fingerprint comparison in order to improve theeffectiveness and accuracy of the comparison process. Therefore, onlycomparison of the fingerprint information may be carried out.Alternatively, a combination of fingerprint information comparison andat least the comparison of name information, date of birth informationand address information may be conducted.

[0323] Then, the usage admitted count “200” in user data 711D identifiedas matching the service number of pay television IC card 100A at stepS148 is updated, i.e. added with the usage admitted count of “150”extracted at step S154, and the updated value is recorded (step S155).Thus, the usage admitted count in user data 711D is updated to “350”. Inaddition to the update of user data 711D, user data 711A is deleted fromuser data administration unit 710 to nullify user data 711A.

[0324] Then, the date of birth information, address information, nameinformation and fingerprint information temporarily stored in temporarystorage unit 740 received at step S152 are stored at respective regionsof date of birth information 714, address information 715, nameinformation 716 and fingerprint information 713 in user data 711D thatis identified as having a service number matching the service number ofpay television IC card 100A at step S148 (step S156).

[0325] Control unit 730 outputs a server side storage completion signalfrom network information input/output unit 735 to master registrationdevice 800 (step S157). Control unit 730 and user data administrationunit 710 attain an inactive state (step S158).

[0326] The output server side storage completion signal is received atnetwork information input/output unit 845 of master registration device800 to be output to control unit 801. Upon receiving the server sidestorage completion signal from server device 700A, control unit 801outputs an operation completion signal from I/F unit 291 to paytelevision IC card 100A, and terminates the access to server device 700(step S137).

[0327] The output operation completion signal is received at I/F unit191 of pay television IC card 100A, and output to control unit 110. Inresponse, control unit 110 renders the set up completion signal to asignal indicating an inactive state, and ends the process (step S111).

[0328] (2) Process During Usage of Pay Television IC Card 100A

[0329] The process in the usage of pay television IC card 100A executedat the pay television system of the third embodiment will be describedhere.

[0330] In order to use pay television IC card 100A, the user mustpurchase a pay television IC card 100A, and purchase or rent descramblemodule 200A. The description here is based on the case of using paytelevision IC card 100A purchased by the process described withreference to FIGS. 20A and 20B.

[0331]FIGS. 21, 22, 23A, and 23B are flow charts of the process executedin using a pay television IC card 100A in the pay television system ofthe third embodiment. FIGS. 21, 22, 23A, and 23B correspond to theprocess executed at pay television IC card 100A, descramble module 200Aand server device 700A, respectively. The dotted lines in the drawingsindicate the flow of data.

[0332] First, the user connects the obtained descramble module 200A totelevision set 300. Detachable pay television IC card 100A is insertedinto descramble module 200A, whereby power is supplied from descramblemodule 200A. Connection between pay television IC card 100A anddescramble module 200A may be established by the non-contact or contacttype connection method.

[0333] Pay television IC card 100A supplied with power initiates thepower on and reset operation under control of control unit 110. Controlunit 110 determines whether the set up operation has been completed ornot (step S201). This determination is based on whether the power on andreset operation has been completed. When set up is completed, a set upcompletion signal is output to descramble module 200A from set upcompletion signal output unit 190 (step 202).

[0334] When pay television IC card 100A does not attain a set up state,a signal indicating an inactive state is output from set up completionsignal output unit 190. In an inactive state, data input unit 130A inpay television IC card 100A and data output unit 230A in descramblemodule 200A are both inactive. This means that control unit 110 does notaccept an input signal even when applied. Also, information is notoutput from data output unit 230A.

[0335] The set up completion signal output from set up completion signaloutput unit 190 indicating an active state is received at set upcompletion signal input unit 290 of descramble module 200A (step S241).In response, data input unit 130A of pay television IC card 100A anddata output unit 230A of descramble module 200A are rendered active,whereby information can be transferred between pay television IC card100A and descramble module 200A.

[0336] Following reception of a set up completion signal at descramblemodule 200A (YES at step S241), the set up completion signal is outputto server device 700A from network information input/output unit 245(step S242).

[0337] The output set up completion signal is received at networkinformation input/output unit 735 of server device 700A (step S301).Server device 700A attains a standby state until a set up completionsignal is received (NO at step S301). Upon receiving a set up completionsignal (YES at step S301), a user ID and server password transmissionrequest signal is dispatched to descramble module 200A (step S302).

[0338] The output server ID and server password transmission requestsignal is received at network information input/output unit 245 ofdescramble module 200A (step S243), and output to control unit 210.Control unit 210 provides the server ID and server password transmissionrequest signal to pay television IC card 100A from I/F unit 291 (stepS244).

[0339] The output server ID and server password transmission requestsignal is received at I/F unit 191A (step S203), and provided to controlunit 110. Control unit 110 reads out server ID 128 and server password129 stored in storage unit 120A, and passes the read out information todescramble module 200A from I/F unit 191A (step S204).

[0340] The output server ID 128 and server password 129 are received atI/F unit 291 (step S245), and provided to control unit 210. Control unit210 dispatches server ID 128 and server password 129 from networkinformation input/output unit 245 to server device 700A (step S246).

[0341] The dispatched server ID 128 and server password 129 are receivedat network information input/output unit 735 (step S303), and providedto control unit 730. Control unit 730 reads out server ID 721 and serverpassword 722 stored in connection permit information storage unit 720for collation with the received server ID 128 and server password 129(step S304). The collocation is conducted at server ID comparison unit762 and server password comparison unit 764 of comparison unit 760.

[0342] In the case where at least either the server ID or serverpassword does not match as a result of collocation, control unit 730outputs an error signal from network information input/output unit 735to descramble module 200A (step S321). The operation on the part ofserver device 700A ends (step S322). The output error signal is receivedat network information input/output unit 245 (step S278), and providedto control unit 210. In response, control unit 210 sends a command so asto display server error at television set 300 via video audio signaloutput unit 280. An error signal is dispatched from I/F unit 291 to paytelevision IC card 100A (step S279), and the process ends (step S280).

[0343] The error signal is received at I/F unit 191A (step S227), andprovided to control unit 110. Control unit 110 ends the process when anerror signal is received (step S228).

[0344] When determination is made of the match of the server ID andserver password at step S304 (YES at step S304), control unit 730 anduser data administration unit 710 both attain an active state via bus750. Simultaneously, a service number transmission request signal isoutput to descramble module 200A from network information input/outputunit 735 (step S305).

[0345] The service number transmission request signal is received atnetwork information input/output unit 245 of descramble module 200A(step S247), and provided to control unit 210. Control unit 210 providesthe service number transmission request signal to pay television IC card100A from I/F unit 291 (step S248).

[0346] The output service number transmission request signal is receivedat I/F unit 191A (step S205), and provided to control unit 110. Inresponse, control unit 110 outputs the service number prestored instorage unit 120A to descramble module 200A from I/F unit 191A (stepS206).

[0347] The service number output here is the service number of themaster registrant. The service number of the master registrant alsoserves as a service number to identify pay television IC card 100A.

[0348] The output service number is received at I/F unit 291 (stepS249), and provided to control unit 210. Control unit 210 dispatches theinput service number from network information input/output unit 245 toserver device 700A (step S250).

[0349] The output service number is received at network informationinput/output unit 735 (step S306), and provided to control unit 730.Control unit 730 temporarily stores the input service number intemporary storage unit 740. Then, service number 712 stored in user dataadministration unit 710 is read out (step S307), and compared with theservice numbers received at step S306 (step S308). This comparison iscarried out at service number comparison unit 761 of comparison unit760.

[0350] When the service numbers do not match as a result of comparisonby service number comparison unit 760, control proceeds to step S309 tocalculate the remaining count of the service numbers stored in user dataadministration unit 710 in order to read out the next service number(remaining count of service number). At step S310, determination is madewhether the calculated remaining number count n is “0” or not. When theremaining count n is “0”, control proceeds to step S321, otherwise, tostep S307 to read out the next service number. The comparison process ofstep S308 is executed for all the service numbers stored in user dataadministration unit 710 until a service number matching the servicenumbers received at step S306 is read out during the process from stepS307 to step S310.

[0351] When the service numbers match as a result of comparison at stepS308, control unit 730 attains an active state allowing access to onlythe user data that has a matching service number among the user datastored in user data administration unit 710 via bus 750. At the sametime, control unit 730 outputs a match signal from network informationinput/output unit 735 to descramble module 200A (step S311).

[0352] A matching case of the service number corresponds to the casewhere the service number of the user data matches the service numberstored in storage unit 120A of pay television IC card 100A. Therefore,correspondence is established between pay television IC card 100A andthe user data with a service number that matches the service numberstored in storage unit 120A of pay television IC card 100A. For the sakeof simplification, it is assumed that the user data shown in FIG. 18 isstored in user data administration unit 710, and the service numberstored in storage unit 120A of pay television IC card 100A is “MT0011”.In this case, user data 711A with the service number of “MT0011”corresponds to pay television IC card 100A.

[0353] The output match signal is received at network informationinput/output unit 245 (step S251), and provided to control unit 210.Control unit 210 sends out a command so as to provide a message such as“Please enter fingerprint” at television set 300 via video audio signaloutput unit 280. Then, fingerprint reader 250 and fingerprintinformation output unit 231 are rendered active (step S252).

[0354] The user of pay television IC card 100A can have his/herfingerprint taken through fingerprint reader 250 in descramble module200A. The fingerprint of the user read by fingerprint reader 250 istransmitted to pay television IC card 100A and server device 700A asfingerprint information (step S253). To pay television IC card 100A, thefingerprint information is output from fingerprint information outputunit 231 of data output unit 230A to fingerprint information input unit132 of pay television IC card 100A. To server device 700A, thefingerprint information is output from network information input/outputunit 245 to network information input/output unit 735 of server device700A.

[0355] At pay television IC card 100A, the fingerprint information isreceived at fingerprint information input unit 132 (step S207), andprovided to control unit 110. Control unit 110 temporarily stores theinput fingerprint information in fingerprint information storage unit163 of information temporary storage 160. Then, control unit 110 storesfingerprint information 122 of the registrant prestored in storage unit120A into registrant fingerprint information storage unit 164 (stepS208). Fingerprint comparison determination unit 175 compares thefingerprint information temporarily stored in fingerprint informationstorage unit 163 with the fingerprint information temporarily stored inregistrant fingerprint information storage unit 164 (step S209). Inother words, the fingerprint information of the user of pay televisionIC card 100A is compared with the fingerprint information of aregistrant stored in storage unit 120A.

[0356] The process in the case where the fingerprint informationtemporarily stored in fingerprint information storage unit 163 does notmatch the registrant fingerprint information temporarily stored inregistrant fingerprint information storage unit 164 at step S209 will bedescribed hereinafter (NO at step 210). For the purpose of conductingcollocation of the fingerprint of all registrants registered in paytelevision IC card 100A, determination is made whether a next registrantis present (step S211). When there is a registrant, control proceeds tostep S208. The fingerprint information of that registrant is comparedwith the fingerprint information temporarily stored in registrantfingerprint information storage unit 164 (step S209).

[0357] By the process from steps S208 to S211, fingerprint information122 of all registrants prestored in storage unit 120A is compared withthe fingerprint information temporarily stored in registrant fingerprintinformation storage unit 164.

[0358] When none of the fingerprint information of all the registrantsstored in storage unit 120A match (NO at step S211), control returns tostep S201. On this occasion, the set up completion signal of paytelevision IC card 100A is rendered inactive.

[0359] The process subsequent to step S209 in the case where thefingerprint information match will be described hereinafter.

[0360] At step S253, the fingerprint information of the user fromdescramble module 200A is output to server device 700A. On the part ofserver device 700A, the output user's fingerprint information isreceived at network information input/output unit 735 (step S312), andprovided to control unit 730. Control unit 730 temporarily stores theuser's fingerprint information in temporary storage unit 740.Fingerprint information comparison unit 766 of comparison unit 760 readsout fingerprint information 713 of user data 711A with the matchingservice number of “MT0011” identified at step S308 for comparison withthe user's fingerprint information in temporary storage unit 740 (stepS313).

[0361] When the fingerprint information match as a result of comparison(YES at step S314), determination is made that the user of paytelevision IC card 100A is the master registrant. A match signal isdispatched from network information input/output unit 735 to descramblemodule 200A.

[0362] The output match signal is received at network informationinput/output unit 245 (step S255), and provided to control unit 210.When a match signal is received, control proceeds to step S256,otherwise, to step S262.

[0363] At step S256, a command is output to provide a selection screento display the messages of, for example, “VIEW PAY TELEVISION PROGRAM”and “REGISTRATION OF NEW USER” via video audio signal output unit 280 totelevision set 300. Waiting is conducted for the reception of a selectsignal by the user. When an additional registration process is selected,control proceeds to step S257, otherwise, to step S262.

[0364] At step S257, an additional registration signal is output to paytelevision IC card 100A from I/F unit 291 for the execution of anadditional registration process at pay television IC card 100A (stepS257). The additional registration signal is received at I/F unit 191A(step S213).

[0365] At step S258, a message of “Please enter date of birth ofadditional registrant” is displayed on the screen of television set 300via video audio signal output unit 280. The additional registrant entershis/her date of birth through the numeric input unit of television set300. The input date of birth of the additional registrant is supplied tocontrol unit 210 via receiver I/F unit 281 (step S258). The date ofbirth information of the additional subscriber supplied to control unit210 is output from I/F unit 291 to pay television IC card 100A (stepS259).

[0366] Then, a message such as “Please enter fingerprint of theadditional registrant” is displayed on the screen of television set 300via video audio signal output unit 280. Fingerprint reader 250 andfingerprint information output unit 231 are rendered active (step S260).The fingerprint information of the person who is to be additionallyregistered, read by fingerprint reader 250, is output from fingerprintinformation output unit 231 to pay television IC card 100A (step S261).

[0367] When the additional registration signal is received at I/F unit191A from descramble module 200A at pay television IC card 100A (stepS213), control proceeds to step S214. When the additional registrationsignal is not received, control proceeds to step S220.

[0368] In response to reception of the additional registration signal,storage unit 120A is rendered to a registration enable state of theuser. Also, a service number for the additional registrant isautomatically assigned (step S213). This service number is a numberdiffering from the service number of the master registrant. As shown inFIG. 16, the service numbers of “AT0011, “AT0012 and “AT0013” areassigned with respect to the master registrant service number “MT0011”.

[0369] At step S214, the date of birth information of the additionalregistrant is received at I/F unit 191A (step S214). At step S215,control unit 110 determines whether the master registrant actual ageinformation 124 stored in storage unit 120A is over the age of 18. Whenolder than 18, control proceeds to step S216, otherwise, to step S217.

[0370] The actual age information of the master registrant is prestoredin storage unit 120A of pay television IC card 100A. The actual ageinformation of the master registrant is stored in storage unit 120A fromthe calculation based on date of birth information 123 of the masterregistrant and the time information received from descramble module200A. The time information received from descramble module 200A iscounted by timer 235, and output from time information output unit 236.Time information is received at time information input unit 131 of paytelevision IC card 100A.

[0371] At step S216, the date of birth information of the additionalregistrant received at I/F unit 191A at step S214 is stored into storageunit 120A. Here, the date of birth information of the additionalregistrant is stored as the user data of the newly assigned servicenumber newly assigned at step S213.

[0372] At step S217, the date of registration (the current date) isstored in the date of birth information in the user data correspondingto the newly assigned service number at step S213 among the user data instorage unit 120A. This information is required to register a registrantthat is below the age of 18 to disable improper viewing of anage-limited pay television program.

[0373] At step S218, fingerprint information output from descramblemodule 200A is received at fingerprint information input unit 132 (stepS218). The received fingerprint information is stored as the fingerprintinformation of the user data corresponding to the newly assigned servicenumber (step S219).

[0374] Although not shown, the presence of an additional registrant isconfirmed every time an additional registration process ends.Confirmation is made whether to continue an additional registrationprocess or not. Additional registration can be carried out without theneed of the fingerprint verification of the master registrant only inthe case where additional information is continued.

[0375] When “VIEW PAY TELEVISION PROGRAM” is selected at step S256,descramble module 200A dispatches a usage admitted count read out signalfrom network information input/output unit 245 to server device 700A(step S262).

[0376] The output usage admitted count read out signal is received atnetwork information input/output unit 735 (step S316), and provided tocontrol unit 730. Control unit 730 reads out usage admitted count 717 ofuser data 711A identified as having a matching service number at stepS308 (step S317), and temporarily stores count 717 in temporary storageunit 740. Assuming that the service number received at step S306 is“MT0011”, the user data identified as having a matching service numberat step S308 is user data 711A. The usable admitted count thereof is“150”.

[0377] Control unit 730 outputs a usable admitted count to descramblemodule 200A from network information input/output unit 735 (step S318).The output usage admitted count is received at network informationinput/output unit 245 (step S263), and provided to control unit 210.Control unit 210 temporarily stores the usage admitted count intemporary storage unit 215.

[0378] At step S264, the time information counted by timer 235 is outputto pay television IC card 100A from time information output unit 236.

[0379] The output time information is received at time information inputunit 131 of pay television IC card 100A (step S220), and provided tocontrol unit 110. At control unit 110, the actual age is calculatedbased on the received time information and the date of birth information123 of the user stored in storage unit 120A (step S221). The calculatedactual age is stored in actual age information storage unit 162 ofstorage unit 120A.

[0380] On the part of descramble module 200A, a screen including theusage admitted count and a message to select “VIEW PAY TELEVISIONPROGRAM” is displayed at television set 300 via video audio signaloutput unit 280 to accept a selection entry (step S265). When “VIEW PAYTELEVISION PROGRAM” is selected, control proceeds to step S266. When“NOT VIEW PAY TELEVISION PROGRAM”, control returns to step S241.

[0381] Encrypted required count signal 205 is supplied from broadcaststation 900 to broadcast information input unit 240A of descramblemodule 200A. Broadcast information input unit 240A outputs encryptedrequired count signal 205 to required count information decoder 275.Required count information decoder 275 decodes encrypted required countsignal 205 and supplies the decoded required count to control unit 210(step S266). The required count is a signal input to broadcastinformation input unit 240A for each pay television program, indicatingthe count required to view that pay television program.

[0382] Control unit 210 causes the decoded required count at televisionset 300 via video audio signal output unit 280 (step S267). At this timepoint, the usage admitted count corresponding to pay television IC card100A, and the required count in order to view the pay television programare displayed on the screen of television set 300.

[0383] When the user selects “VIEW PAY TELEVISION PROGRAM” (YES at stepS268), control unit 210 compares the usage admitted count signal storedin temporary storage unit 215 with the decoded required count signal(step S269). When the usage admitted count signal indicates a valueequal to or above the value of the decoded required count signal (YES atstep S269), control proceeds to step S270, otherwise, to step S277. Atstep S270, control unit 210 outputs an account enable signal fromaccount enable signal output unit 237 of data output unit 230A to paytelevision IC card 100A (step S270).

[0384] The account enable signal is received at account enable signalinput unit 134 (step S222), and provided to control unit 110. When theaccount enable signal is received, control proceeds to step S223,otherwise, to step S226.

[0385] Program attribute signal decoder 270 decodes encrypted programattribute signal 203, and provides program target age information tocontrol unit 210. At this stage, control unit 210 determines thepresence/absence of program target age information (step S271). Whenprogram target age information is present, control unit 210 outputs theinput program target age information to pay television IC card 100A fromprogram target age information output unit 232 (step S272). When programtarget age information is not present, control proceeds to step S273.

[0386] The output program target age information is received at programtarget age information input unit 133 (step S223), and provided tocontrol unit 110. The program target age information, when received, istemporarily stored in program target age information storage unit 161,and control proceeds to step S224. When program target age informationis not received, control proceeds to step S225.

[0387] At step S224, age comparison unit 171 compares the actual ageinformation 124 stored in actual age information storage unit 162 atstep S221 with the program target age information stored in programtarget age information storage unit 161. When the actual age information124 is equal to or over the value in the program target age information,control proceeds to step S225, otherwise, to step S226.

[0388] At step S255, a descramble key is generated at descramble keygeneration unit 140, and output to descramble key input unit 260 ofdescramble module 200A. At step S226, the error signal is output todescramble module 200A.

[0389] When program target age information is included in the programattribute signal, the two conditions, i.e., reception of an accountenable signal at step S222 and determination of the actual age beingabove the program target age at step S224, are established, whereby adescramble key is generated at descramble key generation unit 140. Whenprogram target age information is not included in the program attributesignal, the condition of reception of an account enable signal at stepS222 is established, whereby a descramble key is generated at descramblekey generation unit 140.

[0390] At descramble module 200A, determination is made whether adescramble key has been received from pay television IC card 100A (stepS273). When a descramble key has been received, control proceeds to stepS274. When an error key has been received, control proceeds to stepS277.

[0391] At step S274, a descramble process on video audio scramble signal201 is conducted based on the received descramble key at descramble unit220. A descrambled signal 202 is output to television set 300 via videoaudio signal output unit 280 (step S275).

[0392] Then, control unit 210 outputs the required count temporarilystored in temporary storage unit 215 to server device 700A (step S276).The output required count is received at network informationinput/output unit 735 (step S319), and provided to control unit 730.Control unit 730 reads out usage admitted count 717 of user data 711Aidentified as having a service number matching the service number of paytelevision IC card 100A at step S308, and updates the usage admittedcount to a value that has the required count subtracted (step S320). Forexample, in the case where the required count is “5”, the usage admittedcount “150” of user data 711A corresponding to the service number of“MT0011” shown in FIG. 18 is updated to “145”.

[0393] When the user selects “NOT VIEW PAY TELEVISION” at step S265 orstep S268, descramble module 200A and server device 700A cancel theaccess therebetween, and respectively return to the initial screen. Onthis occasion, the set up completion signal of a pay television IC card100A is rendered inactive.

[0394] At step S277, a message such as “LACK OF USAGE ADMITTED COUNT” isdisplayed when the usage admitted count is below the required count atstep S269, and a message such as “PROGRAM IS AGE LIMITED” is displayedwhen an error signal is received at step S273 on television set 300.Then, descramble module 200A and server device 700A cancel the accesstherebetween, and return to respective initial screens. At this stage,the set up completion signal of pay television IC card 100A is renderedinactive.

[0395] In pay television system 910 of the third embodiment, the usageadmitted count of pay television IC card 100A is administered at serverdevice 700A, and a fingerprint is employed for verification of the user.Therefore, security of a high level can be ensured. Even in the casewhere pay television IC card 100A is lost and passed to the hands of athird party, usage of pay television IC card 100A by a stranger isinhibited.

[0396] Furthermore, since an age-limited pay television program cannotbe played on a television set when the age of the user is not over thespecified age, the audience of an age-restricted program can be limited.In other words, certain persons such as a person under age is inhibitedof viewing.

[0397] Since the usage admitted count of pay television IC card 100A isadministered at server device 700A, a user purchasing a new paytelevision IC card 100A can have the remaining admitted usage count inthe previous owned pay television IC card 100A added to the value of theusage count of the new pay television IC card 100A. Since it is onlyrequired for the user to own a newly purchased pay television IC card100A, the ownership and administration of the pay television IC card100A can be simplified.

[0398] The present invention is also advantageous in a case where theuser loses his/her pay television IC card 100A. The user will be allowedto use the previously obtained usage admitted count by having a paytelevision IC card 100A issued again.

[0399] It is to be noted that an extra process to disable the lost paytelevision IC card 100A is not required. The load on the pay televisionservice provider that issues a pay television IC card 100A can bealleviated.

[0400] Although the present invention has been described and illustratedin detail, it is clearly understood that the same is by way ofillustration and example only and is not to be taken by way oflimitation, the spirit and scope of the present invention being limitedonly by the terms of the appended claims.

What is claimed is:
 1. An IC card comprising: a physical descriptiondata storage unit prestoring physical description data that allowsidentification of a predetermined person, a physical description dataacceptance unit accepting input of physical description data of a user,a determination unit comparing physical description data accepted bysaid physical description data acceptance unit with physical descriptiondata stored in said physical description data storage unit to determinewhether said user is said predetermined person, and an output unitproviding an admission signal based on a determination result by saiddetermination unit.
 2. The IC card according to claim 1, wherein saidphysical description data includes image data obtained by picking up animage of a fingerprint.
 3. The IC card according to claim 1, whereinsaid physical description data storage unit stores physical descriptiondata of a plurality of persons.
 4. The IC card according to claim 1,wherein said admission signal output from said output unit is a signalto cancel scramble of scramble-processed information.
 5. The IC cardaccording to claim 1, wherein said determination unit determines thatsaid user is said predetermined person when physical description dataaccepted at said physical description data acceptance unit matches or issimilar to physical description data stored in said physical descriptiondata storage unit.
 6. The IC card according to claim 1, furthercomprising: an age information acquirement unit acquiring ageinformation of said predetermined person, a reception unit receivingprogram target age information included in a program signal, and an agecomparison unit comparing age information acquired by said ageinformation acquirement unit with program target age informationreceived at said reception unit, wherein said output unit outputs asignal to cancel scramble of scramble-processed broadcast informationbased on a comparison result of said age comparison unit in addition toa determination result by said determination unit.
 7. The IC cardaccording to claim 6, further comprising: a date of birth data storageunit prestoring the date of birth of said predetermined person, and adate data acceptance unit accepting input of data related to the currentdate, wherein said age information acquirement unit acquires said ageinformation based on the date of birth data stored in said date of birthdata storage unit and date data accepted by said date data acceptanceunit.
 8. The IC card according to claim 6, wherein said output unitprovides a signal to cancel scramble of scramble-processed broadcastinformation when said age comparison unit determines that ageinformation acquired by said age acquirement unit is at least the age insaid age information received at said reception unit.
 9. A method ofdetermining an authorized person comprising the steps of: prestoringphysical description data that allows identification of a predeterminedperson, accepting input of physical description data of a user,comparing physical description data accepted at said physicaldescription data acceptance step with said prestored physicaldescription data to determine whether said user is said predeterminedperson, and providing an admission signal based on a determinationresult of said determination step.
 10. The method of determining anauthorized person according to claim 9, wherein said admission signalprovided at said output step is a signal to cancel scramble ofscramble-processed information.
 11. A program of determining anauthorized person causing a computer to execute the steps of: prestoringphysical description data that allows identification of a predeterminedperson, accepting input of physical description data of a user,comparing physical description data accepted at said physicaldescription data acceptance step with said prestored physicaldescription data to determine whether said user is said predeterminedperson, and providing an admission signal based on a determinationresult of said determination step.
 12. The program of determining anauthorized person according to claim 11, wherein said admission signalprovided at said output step is a signal to cancel scramble ofscramble-processed information.
 13. A computer readable recording mediumrecorded with the program of determining an authorized person defined inclaim
 11. 14. An IC card comprising: a storage unit storing physicaldescription data that allows identification of a predetermined person,an acceptance unit accepting input of physical description data of aperson, a determination unit comparing said input physical descriptiondata with said stored physical description data of said predeterminedperson to determine whether the person corresponding to said inputphysical description data is said predetermined person, and a controlunit providing control so as to allow input of physical description dataof another person differing from said predetermined person at saidacceptance unit, and store said input physical description data of saidanother person in said storage unit when determination is made by saiddetermination unit that the person corresponding to said input physicaldescription data is said predetermined person.
 15. A method ofregistering an authorized person comprising the steps of: storingphysical description data that allows identification of a predeterminedperson, accepting input of physical description data of a person,comparing said input physical description data with said stored physicaldescription data of said predetermined person to determine whether theperson corresponding to said input physical description data is saidpredetermined person, allowing input of physical description data ofanother person differing from said predetermined person whendetermination is made at said determination step that the personcorresponding to said input physical description data is saidpredetermined person, and storing said input physical description dataof said another person.
 16. A program of registering an authorizedperson causing a computer to execute the steps of: storing physicaldescription data that allows identification of a predetermined person,accepting input of physical description data of a person, comparing saidinput physical description data with said stored physical descriptiondata of said predetermined person to determine whether the personcorresponding to said input physical description data is saidpredetermined person, allowing input of physical description data ofanother person differing from said predetermined person whendetermination is made at said determination step that the personcorresponding to said input physical description data is saidpredetermined person, and storing said input physical description dataof said another person.
 17. A computer readable recording mediumrecorded with the program of registering an authorized person defined inclaim
 16. 18. A descrambler comprising: a physical description datastorage unit prestoring physical description data that allowsidentification of a predetermined person, a reader reading out physicaldescription data of a user, a determination unit comparing physicaldescription data read out by said reader with said physical descriptiondata stored in said physical description data storage unit to determinewhether said user is said predetermined person, and a descramble unitcanceling scramble of scramble-processed information based on adetermination result by said determination unit.
 19. A server devicecomprising: a usage admitted count storage unit storing incorrespondence a service number required to identify an IC card and ausage admitted count of an IC card, a reception unit receiving physicaldescription data and a service number required to identify a person, anda control unit storing said received physical description data incorrespondence with said received service number in said usage admittedcount storage unit.
 20. The server device according to claim 19, furthercomprising: a determination unit determining whether physicaldescription data of a person identical to the person corresponding tosaid received physical description data is already stored in said usageadmitted count storage unit, and an update unit updating the usageadmitted count stored corresponding to said received service number to avalue having the usage admitted count already stored corresponding tosaid received physical description data added, according to adetermination result by said determination unit.
 21. The server deviceaccording to claim 19, further comprising: a usage count reception unitreceiving a service number and a usage count, and a subtractorsubtracting said received usage count from said usage admitted countstored corresponding to said received service number, according toreception of said usage count.
 22. The server device according to claim19, wherein said usage admitted count storage unit stores datacorresponding to a plurality of service numbers.
 23. The server deviceaccording to claim 19, wherein said physical description data includesimage data obtained by picking up an image of a fingerprint.
 24. Theserver device according to claim 19, wherein said determination unitdetermines, when said received physical description data is identical orsimilar to physical description data stored in said usage admitted countstorage unit, that the physical description data is of the same person.25. The server device according to claim 19, further comprising: a usagecount reception unit receiving a service number and a usage count, adetermination unit determining whether the usage admitted count storedcorresponding to said received service number is at least said usagecount, and a determination result output unit providing a determinationresult by said determination unit.
 26. A method of administering a countexecuted by a server device including a usage admitted count storageunit storing a service number required to identify an IC card and ausage admitted count of an IC card in correspondence, comprising thesteps of: receiving physical description data and a service numberrequired to identify a person, and storing said received physicaldescription data in said usage admitted count storage unit incorrespondence with said received service number.
 27. A countadministration program executed by a server device including a usageadmitted count storage unit storing a service number required toidentify an IC card and a usage admitted count of an IC card incorrespondence, comprising the steps of: receiving physical descriptiondata and a service number required to identify a person, and storingsaid received physical description data in said usage admitted countstorage unit in correspondence with said received service number.
 28. Acomputer readable recording medium recorded with the countadministration program defined in claim
 27. 29. A physical descriptiondata reader comprising: a service number reception unit receiving froman IC card a service number required to identify said IC card, aphysical description data reader unit reading out physical descriptiondata of a user, and a transmission unit transmitting said read physicaldescription data and said received service number to a server devicethat stores a usage admitted count of said IC card.